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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 


FORT GEORGE G. MEADE, MARYLAND 20755-6000 


Serial: 
J9069-92 
4 March 1993 


This responds to your Freedom of Information Act (FOIA) 
request of 16 January 1992 for an original copy of TM 11-485 and 
the declassification and release of TM 32-220. 
Your request has 
been processed under the FOIA, and although we do not have an 
original of TM 11-485, a copy of that document is enclosed along 
with a copy of TM 32-220. 
Certain information, however, has been 
deleted from TM 32-220. 


Some of the information deleted from the TM 32-220 was found 
to be currently and properly classified in accordance with 
Executive Order 12356. 
This information meets the criteria for 
classification as set forth in subparagraphs (a) (2), (a) (4) and 
(a) (8) of section 1.3 and remains classified CONFIDENTIAL as 
provided in section 1.1 of Executive Order 12356. 
The 
information is classified because its disclosure could reasonably 
be expected to cause damage to the national security. 
Because 
the information is currently and properly classified, it is 
exempt from disclosure pursuant to the first exemption of the 


FOIA (5 u.s.c. section 552(b) (1)). 


In addition, this Agency is authorized by various statutes 
to protect certain information concerning its activities. 
We 


have determined that such information exists in TM 32-220. 
Accordingly, those portions are also exempt from disclosure 
pursuant to the third exemption of the FOIA which provides for 
the withholding of information specifically protected from 
disclosure by statute. 
The specific statutes applicable in this 
case are Title 18 u.s. Code 798; Title 50 u.s. Code 403(d) (3); 
and Section 6, Public Law 86-36 (50 u.s. Code 402 note). 


Since these deletions may be construed as a partial denial 
of your request, you are hereby advised of this Agency's appeal 
procedures. 
Any person denied access to information may, within 


60 days after notification of the denial, file an appeal to the 


NSA/CSS Freedom of Information Act Appeal Authority. 
The appeal 
shall be in writing addressed to the NSA/CSS FOIA Appeal 
Authority, National Security Agency, Fort George G. Meade, MD 


20755-6000. 
The appeal shall reference the initial denial of 


Serial: 
J9069-92 


access and shall contain, in sufficient detail and particularity, 
the grounds upon which the requester believes release of the 
information is required. 
The NSA/CSS Appeal Authority will 
respond to the appeal within 20 working days after receipt. 


on 5 February 1993, you spoke to a member of my staff who 
advised you that we anticipated costs of $100.00 to process your 
request, and you agreed to pay that amount. 
The actual fees 
incurred total $96.80. 
The search for records responsive to your 
request took 4 hours, and 412 pages are being released to you. 
You are allowed 2 hours of search and the duplication of 100 


pages at no cost pursuant to 5 u.s.c. 552 (4) (A) (iv) (II). 
The 
remaining charges are assessed in accordance with DoD Regulation 


5400.7-R, which assesses $25.00 per hour for search and $.15 per 
page for duplication. 
A bill for the total due will be sent to 
you under separate cover. 


Encls: 
ajs 


Sincerely, 


~J.~ 


~-MICHAEL A. SMITH 
~Director of Policy 
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PART ONE (C) 


INTRODUCTION TO CRYPT ANAL YTICS 


CHAPTER 1 (C) 


INTRODUCTION 


Section I. (U) GENERAL 


1-1 . (U) Purpose 
This manual presents the basic principles of cryptana- 
lytics and its relation to cryptography. Cryptography 


deals with the art of secret communications while 
cryptanalytics treats of their solution by those who 
do not have access to the plaintext communications. 
The manual is primarily a training text, designed to 
promote an understanding of the practical applica- 
tion of cryptanalytics to provide the student with 
the knowledge of the techniques and methods used 
. in the cryptanalysis of common codes and ciphers. 


1-2. (U) Scope 


This manual has been organized into six parts. The 
first part deals with the fundamentals necessary to 
study the remaining five parts. In each subsequent 
part, the manual covers a type cryptographic system, 
its practical application, and the appropriate analysis 
methods. The material presented in each part 
represents a more complex cryptographic system 
than that preceding it and, therefore, requires a more 
detailed study.· All parts except the last two are 
thorough in the scope of their study. The last two. 


due to the extreme difficulty of the subject matter. 
have been limited to an introductory study only. 


Note at the outset that each system presented has 


many possible variations. All the variants have not 
been included. The contents have been deliberately 
limited to those systems, methods, and techniques 
which offer the broadest possible application, and 


which, when mastered, will provide the greatest 
degree of understanding of the subject area. 


1-3. (U) Changes or Revisions 


Users of this publication are encouraged to submit 
recommended changes and comments to improve the 


publication. Comments should be keyed to the 
specific page, paragraph, and line of the text in which 
the change is recommended. Reasons will be provided 
for each comment to insure understanding and 
complete evaluation. Comments should be prepared 
using DA Form 2028 (Recommended Changes to 
Publications) and forwarded direct to the Command- 


ing General, United States Army Security Agency, 
ATTN: IAFOR-RL, Arlington Hall Station, Arling- 
ton, Va. 22212. 


1-4. (U) Pevelopments 


Cryptology, the branch of knowledge which treats of 
the principles of cryptography and cryptanalytics, 
is not a static art or science. Constant change, both 
in the systems used and in techniques of analysis, 
is its hallmark. What is regarded today as un- 
necessary, or as wholly impractical, may become 
possible and absolutely necessary tomorrow. The 
development of cryptology has a long history. Basic 


systems of cryptography and of cryptanalysis devel- 


oped in the past, although relatively simple by 
today's standards, still are applicable. In some cases 
these same systems and techniques, or variations of 
them, are still in use today. These systems vary, from 
the relatively simple hand-generated ciphers and 


codes to the highly sophisticated and complex 
machine systems. Accordingly, the methods and 
techniques of their solution also vary from rather 
simple methods to highly involved studies requiring 


a great deal of time and skill. HO\vever, the basic 
techniques used in the solution of the less complex 
systems form the basis for the study and the analysis 
of the more complex systems. For this reason the 


following text progresses from the simple through the 
more complex. 
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Section II. (C) TERMINOLOGY 


1-5. (U) Basic Definitions 
In cryptology, as in any other art or science, a host 
of words and phrases exist, each having special 
meanings within the context of the subject area. 
These meanings may or may not relate to the common 
usage of the word or phrase. As forms of verbal short- 
hand, it is invaluable to state exactly what is meant 
with the minimum use of time and words. For the 
purpose of this manual it is necessary to understand 
some of the common definitions at the outset. Other 


definitions will be introduced and explained in detail 
as the subject is presented. For a complete list of 
definitions the NSA Basic Cryptologic Glossary, 
1965, may be consulted. 
a. Signal Communications. Any means of trans- 
mitting messages other than by direct conversation 
or mail. A commander uses signal communications 
to receive reports of hostile dispositions and activities, 
to receive reports of the progress and needs of sub- 
ordinate and neighboring friendly units, to send 
orders to subordinate units, to receive orders from 
superior units, and to send to higher and adjacent 
units information necessary for the coordinated action 
of the whole command. 
b. Means of Signal Communications. A medium, 
including equipment, used by a command for trans- 
mitting and receiving messages. The most important 
are: 
(1) Wire. 
(a) Telephone. 
(b) Telegraph. 
(c) Teletypewriter. 
(d) Facsimile. 
(2) Radio. 
(a) Radiotelephone. 
(b) Radiotelegraph. 
(c) Radio teletypewriter. 
(d) Radio facsimile. 
c. Message Center. A communications facility, sub- 
ordinate to and usually located within or nearby a 
command, having one or more of the above means 
of communications available. It serves as a point of 
origin, destination, and relay for messages within the 
command. Here messages are processed prior to 
transmission and after reception. 
d. Writer. The person who actually prepares and 
signs the message. The writer may be the originator 
or his officially designated representative. 
e. Originator. The command by whose authority a 
message is sent. A commander may delegate this 
authority to one or more subordinates, who originate 
messages as required in the commander's name. 


f. Addressee. The office, headquarters, activi.ty or 
individual to whom a message is directed by the 
originator. 
g. Externals. Those elements appearing outside 
the body of the message placed on the message by 
the communications center for the purpose of 
routing. Examples of externals are callsigns, serial 
numbers, precedence indicators, times of file, and 
special routing instructions. 
h. Message Text. That portion of a message which 
contains the communication. It may be in plain- 
text or i/ecret writing. 


1-6. <¢'Secret Communications 
a. Inlercommunications are any means susceptible 
to interpretation by one of the five senses. Those 
most commonly used are visual or auditory. Aside 


from the use of simple visual and auditory signals 
for intercommunication over relatively short dis- 
tances, military communications depend upon the 
act of writing (messages), speaking (telephone and 


radiotelephone), and projecting a picture or illus- 
tration (TV and facsimile). Of these methods, our 
interest lies primarily with the first, and the latter 
two only insofar as the transmission of messages are 
concerned. 
b. 'The origins and use of secret communications 
are unknown, but probably began in some form 
with man's ability to communicate. They originated 
in the earliest days of organized warfare and diplo- 
matic relations where they were soon recognized as 
a necessity. The earliest reliable reference to the 
use of secret writing occurred in 900 A.D. when 


Plutarch reported the ancient Spartans as using a 
device called Scytale, a method of secret writing in 
which a narrow strip of parchment was wound round 
a wooden baton, the message written across the 
adjoining edges. History records the subsequent 
growth of the art, but the real beginnings of sys- 
tematic modern cryptology is traced back to the 
early 13th century. During this period the science 
was developed and employed extensively in the 
diplomatic relations of the Papal States. From this 
period forward, its growth, although sporadic, has 
been constant. Systems of greater complexity have 
been introduced followed by the development of 
methods and techniques for their analysis. 


c. Speech can be secured by electronic devices 
that distort, substitute, or change the electrical 
current of telephone and radiotelephone, rendering 
it unintelligible to all but those provided with 


similar electronic devices properly arranged for the 
purpose. The same thing is true in the case of 
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facsimile transmission (the transmission of charts, 
maps, illustrations, messages, etc.), 
and simple 
forms of enciphered television transmissions cur- 
rently used in conjunction with "pay·TV." In both 
instances, lacking the proper device to decipher the 
signal, one would be unable to receive intelligible 
information. 
d. Writing can be secured by two general methods. 
It can be made invisible or unintelligible. 
(1) Invisible writing is done with certain chem- 
icals called invisible, sympathetic, or secret inks 
which are invisible to the naked eye. In order to 
make the writing visible, the message is first processed 
with a suitable reagent which in effect develops the 
message. Invisible writing is also produced by reduc- 
ing the writing to microscopic size. This method 
requires special photographic equipment to reduce 
the writing, and later enlarge the writing to make 
it visible. 
(2) Although invisible writing finds some appli- 
cation in military communications, by far the most 
important means of producing secret writing is by a 
cryptographic process, a far simpler and more effec- 
tive method. The writing remains visible but its 
secrecy is protected by its unintelligibility. 


1-7. ~Plaintext and Encrypted Text 
a. Visible writing which is intelligible, i.e. conveys 
an understandable or sensible meaning (in the 


language in which it was written) and does not intend 
to convey a hidden meaning is plaintext. A message 
in plaintext is termed a plaintext message, a cleartext 
message, or sometimes a message in the clear. 
b. Visible writing which conveys no intelligible 
meaning in any recognized language is in encrypted 
text, and such writing is a cryptogram. 
c. Visible writing may be intelligible, but the 
obvious meaning it conveys may not be the real 
meaning intended. Secret communications of this 
sort are impractical for field military use but are 
often encountered in espionage and counterespionage 
activities. 


1-8. %Plain and Cipher Alphabets 


a. A plain alphabet is a series of symbols constitut- 
ing the speech sounds of a language, arranged in 
their normal sequence. A cipher alphabet is one in 
which the same elementary speech sounds are repre- 
sented by symbols other than those used in the 
normal alphabet. A cipher alphabet is composed of 
two components, the plain component represented 
by a plain alphabet, and a cipher component, repre- 
sented by a disarranged alphabetic sequence. 
b. Basically the method of using a cipher alphabet 
involves finding a plaintext value in the plain com- 
ponent and then finding the cipher value which is · 


substituted for it in the cipher component. 


Section Ill. ~CRYPTOGRAPHIC SYSTEMS 


1-9. gl} Codes1 Ciphers1 and Enciphered Codes 


A general cryptographic system is the sum total of 
all the basic invariable rules followed in converting 
the plaintext of a message to ciphertext, producing a 
cryptogram, and the reverse, drawn up between 
correspondents or furnished them by higher authority. 
All cryptographic systems can be classed in two basic 
systems, or one variation, according to the treatment 
the plaintext undergoes in its transformation to a 
cryptogram. The two basic systems are cipher systems 
and code systems. 
a. In ciphers or cipher systems, cryptograms are 
produced by applying the cryptographic treatment 
(process whereby plain writing is changed to secret 
writing) to individual letters, or groups of individual 
letters, of the plaintext message. A cryptogram pro- 
duced by this method is in cipher, and is called a 
cipher message or a cipher. The operation is called 
enciphering. Changing the cipher into plaintext is 
called deciphering. A cipher message may be pro- 
duced· by several processes. A cipher table, cipher 
device, or cipher machine may be used for the en- 
cipherment of a message. Any of the cipher systems 


involving only the use of paper and pencil are known 


as cipher tables. A cipher device is an apparatus or a 
simple machine for literal encipherment and de- 


cipherment, usually manually operated. A cipher 
machine is a more complex electromechanical device 
serving the same purpose but usually requiring an 
outside power source. It may be operated "off line" 


whereby a cryptogram i& produced prior to trans- 
mission, or it may be operateJ. "on line" \\·hereby 


the process of encipherment-transmi5sion-decipher- 
ment occurs simultaneously between correspondents. 
b. In codes, or code systems, cryptogram,; are pro- 
duced by applying the cryptographic treatment to 
entire words, phrases, or sentences of the plaintext 
message. A characteristic of codes is that the crypto- 
graphic element used as replacement of the plain- 
text elements is normally of constant length as 
opposed to the replaced plaintext element which 
varies in length. A cryptogram produced by means of 
a code system is called a code message, or more simply 
a code, the text being referred to as code text. Pro- 
ducing a cryptogram is called encoding. Breaking the 
code back into plaintext is called decoding. A code 
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message may be produced through the use of several 
types of code systems. Common systems include code 
books, code charts, and code tables. All code systems 
are manually operated and are composed of listings 
of plaintext and corresponding cipher values. The 
foregoing classification of code systems is based on 
the manner in which the values are listed. 
c. The variant class of systems previously men- 
tioned are not encountered as often as the basic 
types, although still important. This class contains 
such quasi-systems as enciphered codes, systems 
where code groups are enciphered; encoded ciphers, 
systems wherein ciphertext is encoded; and super- 
enciphermen t, systems wherein ciphertext is again 


'enciphered in another cipher system different from 
that used to produce the original ciphertext. The 
complexity of these processes, the amount of time 
needed, the possibility of inducing errors, and the 
problematic increase of security created by these 
methods are factors which limit their use in most 


milit'ary communications. 


1-1 0. ~Discriminants (System Indicators) and 


Specific Keys 
Cryptographic systems, regardless of type, normally 
include two elements, not part of the plaintext, to 
facilitate processing and handling. The elements 
may be a single number, a single letter, a group of 
letters or numbers, or a word or a phrase. The ele- 
ments usually correspond in structure and external 
appearance to the cipher or code text in order to 
conceal them. However, to aid in their recognition 
by communications center personnel, they usually 
occur in a specific position within the text of a 
message. These two elements are the discriminant, 
or the system indicator, and the specific key. 
a. The discriminant indicates the specific crypto- 
graphic system used to produce the cryptogram. 
b. The specific key, used in conjunction with the 
discriminant, indicates "how" the cryptographic 
system was used. It may indicate the starting point 
in code books and manual cipher systems, the "set 
up" for a cipher machine or device, the manner in 


which the machine is prepared for the encipherment 
and decipherment of a specific message. The specific 
key is changed frequently, after a given number of 
characters have been enciphered, at the end of a 
time period, or after a message. Exact periods of 
usage of a given key may be dictated by higher 
authority or by agreement among correspondents. 
Derivation of specific keys involves the use of spe- 
cially prepared tables, documents, or books. 


1-11. ~Ciphers, Transposition and Substitution 
The two distinct types of cipher treatment, applied 
to plaintext to covert it to secret text, yield two 
different classes of cryptograms. In the first, trans- 
position, the elements or units of the plaintext retain 
their original identity and only undergo a change in 
their relative position. In the second, substitution, 
a cipher element of varying length is substituted for 
a plaintext value, usually of the same length. Ylore- 


over all cipher elements \\ithin a given system are 
normally of the same length, though there are a few 
exceptions. 
a. A simple form of a transposition cipher may be 
observed in figure 1-1. As the system's name implies, 
ciphertext is generated simply by the disarrange- 
ment of the letters of the plaintext. But note, this 
disarrangement is not a random process, rather it 
follows specific rules. In this case the pl-aintext is 
inscribed in the cells .of a matrix as one \vould 
normally write, then extracted by columns from left 
to right and put into groups of five letters to form 
ciphertext. 
b. The second class of treatment by which a 


written plaintext message can be converted to secret 
text is by substitution. In substitution systems, the 
elements of the plaintext retain their original relative 


positions· to one another, but are replaced by other 
elements which have different values or meanings, 
with the result that the original text becomes un- 
intelligible. A simple example of such a substitution 
system is one used by General Clinton during the 
American Revolution: 


ABCDEFGHUKLMNOPQRSTmWXYZ 


51 52 53 54 55 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 


Using this system, a message was enciphered by 
substituting two numerical values for each literal 
value in the plaintext message. For example, the fol- 
lowing message would be enciphered as shown below: 
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Figure 1-1 r.L Tramposition systems ( U). 


1-1 2. ¢'Divisions of Cipher Systems 


Each of the two classes of cipher systems, trans- 
position and substitution, are further subdivided 
based on the number of characters composing the 
textual elements of units undergoing treatment, and 
the number of cipher elements replacing the plaintext 
elements. A sharp line of demarcation cannot be 
drawn between systems in every case, for occasionally 
a given system may combine methods related to 
two differing systems. The descriptions given in the 
following paragraphs are for convenience in present- 
ing the systems. Approved definitions may be found 
in NSA Basic Cryptologic Glossary. 
a. Transposition System. A cryptographic system 
in which the elements of the plaintext (individual 


letters, groups of letters, syllables, words, phrases, 
sentences, or code groups or their components), 
undergo some change in their relative position with- 
out a change in their identity. The three major 
classes of transposition systems are: 


(1) Single transposition. Those systems wherein 
the plaintext undergoes only one transposition. 
(2) Polyphase transposition. Transposition sys- 
tems wherein the plaintext undergoes two or more 
transpositions. Of this type transposition, double 
transposition is most common. 
(3) Grille transposition. A transposition system 
involving the use of two devices; a matrix of given 
size, and a grille, a thin material in which perforations 
have been made. Normally the plaintext message is 
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inscribed in the cells of the matrix, one word or letter 
per cell, in normal left-to-right, top-to-bottom order. 
The grille is then placed over the matrix, the perfora- 
tions exposing portions of the plaintext. These are 
extracted and recorded and the grille is revolved. 
Again more plaintext is exposed. This process is 
continued until all the plaintext has been extracted 
from the matrix, the process transposing the relative 
order of the words or letters of the plaintext. 
b. Substitution System. A cryptographic system 
which involves the replacement of the plaintext value 
by one or more ciphertext values with no change 
between their relative order of occurrence. Both or 
either of the plaintext and ciphertext values may be 
of equal or different length and fox:m the basis of the 
further subclassification of the system. 
(1) Monoalphabetic substitution. A system of 
substitution involving a single fixed cipher sequence 
from which a cipher equivalent of one or more ele- 
ments is drawn in all cases to represent one plaintext 
unit of equal length. 
(a) Monographic substitution. Monoalphabetic 
substitution system in which the plaintext units 
replaced are always single units, letters, or numbers; 
but in which the length of the cipher unit may vary. 
1. Uniliteral substitution. Monographic sub- 
stitution in which single letters or numbers of the 
plaintext are replaced by single cipher equivalents. 


2. Multiliteral substitution. Monographic 
substitution in which single letters of the plaintext 
are replaced by cipher units of two or more characters. 
(b) Polygraphic substitution. Substitution sys- 
tems in which the plaintext units treated are group- 
ings of more than one element of regular length, 
replaced by cipher elements of similar length. 


(2) Polyalphabetic substitution. A system of sub- 


stitution in which successive plaintext elements of a 


message are replaced by cipher elements drawn from 
a succession of different cipher alphabets. 
(a) Periodic polyalphabetic substitution. A 
method of polyalphabetic substitution in which a 


series of cipher alphabets are used cyclically, also 
called repeating key. 
(b) Aperiodic polyalphabetic substitution. 
A 
method of polyalphabetic substitution in which the 
method of substitution results in the suppression of 
cyclical phenomena in the cryptographic text. 
c. Application of Systems. Transposition systems, 
particularly the polyphase systems, excepting double 
transposition, although offering a greater degree of 
security than some substitution systems, find little 
application in military communications. Complexity 
of operation, time required for their use, the limita- 
tions on message length, and the practical difficulties 
encountered in producing and distributing the ma- 
terial required for their use, all serve to limit their 
effective use. 


1-1 3. ~Code System 
a. Code systems differ from cipher systems in that 
the substitution of values does not involve a one- 
to-one ratio. A group of arbitrary length, usually 
three to five letters, figures, or combinations, is 
substituted for either letters, syllables, phrases, or 
sentences. 
b. The mechanics of a code system are such that 
usually some method of listing the code groups and 
their associated plaintext values is required. A 
detailed explanation of code systems and their 
classification is given in Part Six. 
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CHAPTER 2 (C) 


SECURITY OF CRYPTOGRAPHIC SYSTEMS 


Section I. (C) GENERAL 


2-1 ~ctical Requirement of a Military 
Cryptographic System 
Cryptographic systems must meet certain funda- 
mental requirements of a practical nature for use in 
military communications. In order of importance, 
these requirements are: reliability, security, rapidity, 
flexibility, and applicability. 
a. Reliability means that the cryptographic sys- 
tem, whether a code book, a cipher machine or device, 
or cipher table, will be on hand and in good working 
order, available for instant use. When used, it can be 
operative as long as needed. It also means that the 
cryptogram produced can be decrypted quickly, 
accurately, and without uncertainty as to meaning. 
Simplicity is implied in reliability; usually, the more 
simple the system the more reliable it is. 
b. The needs for both security and rapidity in a 
military cryptographic system are often conflicting 
requirements. Security is the total protection afforded 
by a sound cryptographic system; rapidity is the 
speed of operation of the system. Maximum security 
at all times is the goal, but. cannot always be met. 


Often a compromise between these differing require- 
ments must be effected. In messages exchanged 
among higher headquarters, some speed may be 
sacrificed to attain greater security. Among lower 
headquarters and between units conducting active 
operations, security must often give way to the 
greater need for speed in communications. 
c. Concerning flexibility, a cryptographic system 
should have as wide an application as possible. 
A system specifically adapted to a particular usage 
cannot serve as an all-purpose system. A code book 
designed for field operations can hardly serve the 
needs of a high headquarters, nor can a system 
designed for it serve the needs of small combat units. 
d. The last factor concerns general application of 
the system. 
(1) Cryptograms produced by the system must 
be in a form suitable for transmission by means 
available to the using unit. 
(2) The system, especially that used at lower 


echelons, should be relatively simple in its operation 
and should be operable under different field conditions. 
(3) The system must be such that errors in the 
cryptographic process can be either corrected easily 
and quickly by the operator or be of no consequence 
in the decipherment process. 
(4) The system, if a device or a machine, must 
be light in weight, rugged in construction, and simple 
to operate, requiring the use of only one operator. 
e. In order to satisfy the conflicting requirements 
posed by all the foregoing factors, several crypto- 
graphic systems are available to each unit or head- 
quarters. This procedure permits the fulfillment by 
each unit of its own immediate needs for a system 
oriented to its mission, plus it provides a .secure 
means of communications between adjacent units 
and higher and lower headquarters. 


2-2. ~ecurity Requirements of a Military 
Cryptographic System 
a. The ideal cryptographic system for military 
purposes is a single all-purpose system which is 
practical for usc by the highest headquarters and 
by the smallest troop unit in the combat area, and 
which also presents such a great degree of crypto- 
graphic security that, no matter ho'v much traffic 
became available all in the same key, the crypto- 
grams composing this traffic would resist solution 
indefinitely. Such an ideal system, however, is 
beyond the realms of possibility so far as present 
methods of cryptographic communications are con- 
cerned. For this reason, and those discussed in the 
preceding paragraph. a multiplicity of systems 
must be employed, each designed for a specific 
purpose, at a given level of security. 
b. The best that can be expected for each system 
is that the degree of security be great enough to 
delay solutions for such a length of time that, when 
the solutions are finally reached, the information 
obtained by the enemy has lost all its "short term," 


immediate, or operational value, and much of its 


"long term," research or historical value. 
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2-3. ~xploitation of Cryptographic Systems 
for study. As a rule, the greater the volume of text, 
In theory, all cryptographic systems are vulnerable 
the more easily and speedily a system can be solved. 
to analysis and exploitation, given sufficient time, 
A single cryptogram in a given system may present 
organization, skill, and volume of traffic. Analysis 
an almost impossible task to the cryptanalyst, but 
can be accomplished even if the general system and 
if many cryptograms arc available in the same 
the specific keys are unknown at the start. In actual 
system in_ the same or in closely related specific 
practice, however, the security of a. cryptographic 
keys, the solution may be reached in a very short 
system, and therefore its degree of vulnerability to 
time. 
analysis, are correlated directly to: 
d. The number, skill, efficiency, and organization 
a. The cryptographic soundness of the system. 
of personnel and units assigned to the analysis of 
The degree of security of any system depends on 
communications. This factor plays a direct part in 
this factor, and in turn determines the resistance to 
tho analysis and exploitation of a system. The 
analysis which the system offers. A sound system, 
simplest system may resist cryptanalytic attack if 
in the sense that the cryptographic process provides 
the analysts are unskilled. Even if a system is solved, 
a maximum of variant values with little or no char- 
the information may not be fully exploited if it 
acteristic patterns subject to analytic attack, \vill 
lacks proper organization for this purpose. 
resist analysis longer than a weak cryptographic 
e. The amount and character of collateral in- 
system, all other factors being equal. 
formation and intelligence available. Cryptograms 
b. The adequacy and soundness of the operating 
between correspondents about whom no information 
instructions pertaining to a system and the extent 
is available may pose a very difficult problem. 
to which the users follow these instructions. Security 
If, however, a certain amount of information is 
of a good cryptographic system can be almost com- 
known, a solution may be readily obtained. The 
pletely destroyed by the users who, through care- 
more information at hand concerning a given 
lessness or ignorance, fail to follow presGribed 
cryptogram (including particulars of the basic 
methods of operation or who change operating 
system, as well as knowledge of its possible contents, 
procedures in the mistaken belief that they are 
i.e. 
proper names, stereotyped beginnings and 
improving the system. 
endings, and events or subjects referenced in the 
c. The volume of cryptographic text available 
message), the easier the solution. 


Section II. (C) THE CRYPTANALYTIC A IT ACK 


2-4. ~mmunications Intelligence Operations 
providing both support to the intercept effort and 
Communications Intelligence (COMINT) operations 
u. source of information to their own right, two 
study enemy communications for the purpose of 
,.;pecial collection techniques are available. 
obtaining information and intelligence. COMINT 
.,__· 
(b) Radio fingerprinting (RFP). RFP is the 
includes the collecting, processing,· evaluating, and 
technique of identifying radio 
transmitters by 
reporting of intelligence derived from raw data. 
n·cording on film, and later by analyzing the power 


COMINT attempts to answer three questions 
•md frequency variations of an on-off keyed Con- 


concerning enemy communications: Who, Where. 
tinuous Wave (CW) emission. 
and What; who are the originators and addressees, 
(c) Radio direction finding (RDF). RDF is 
where are they located, and what do the message,; 
t ht• technique of determining the azimuth (bearing) 
say. 
',f >!. transmitter from the point of interception. By 
a. The two steps in the series of activities whose 
p,;tablishing the bearing on a transmitter from 
end objective is to answer these questions are the 
"''v"ral different points, it is possible to fix the goo- 


collection of raw data, and the study and analysis 
s:-raphic location of the emitter. 
of this data. 
12) Study and analysis. The second step in 
(1) Collection. 
CO\fi~T operations is the study and analysis of 


/(a) Intercept operations. Intercept operations 
all data provided by the preceding intercept activi- 
include all activities and functions directly related 
t it>s. The preliminary processing of this data nor- 
to the intercepting and recording of enemy radio 
mally occurs in a traffic analysis section. Traffic 
communications. Major functions which are a part 
analysis is the study of the externals of signal 
of intercept operations are the mission assignment 
communications by all means short of the crypt- 
and control, the allocation of equipment and 
analysis of the message text. Traffic analysis re- 
facilities; and the assignment and direction of 
constructs radio communications networks by noting 
.. 
personnel. As an adjunct to intercept operations, 
volume, 
direction, 
and 
routing 
of 
messages; 
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correlating transmission frequencies and schedules 
used among a network's various stations and nets; 
determining the location of radio stations by evalu- 
ating the results of radio direction finding; identifying 
radio station association by evaluating the results of 
radio fingerprinting; recovering the system or systems 
of generating, assigning, and changing radio callsigns; 
and studying all items that co·nstitute messages 
originated by operators and exchanged among them- 
selves on a radio net. 
(a) Information gleaned by the traffic analyst 
serves two general purposes. First, it provides a 


basis for further interception of the enemy's com- 
munications. Second, it produces information that 
is of intelligence value in itself, and also of great 
value to the cryptanalyst in his attack upon the 
message text. Traffic analysis is able not only to 
ascertain the geographic locations and dispositions 
of troop units and headquarters, but also sometimes 
can predict, with varying degrees of reliability, the 
areas and extent of immediately pending or future 
activities of the enemy. This can be done without 
reading the text of the intercepted message. Specifi- 


cally, enemy plans and operations may be revealed by: 
1. Movement, appearance, and disappear- 
ance of radio stations. 
2. Changes in volume and routing of 
messages. 
3. Characteristics of messages and any 
changes thereto. 


4. Redeployment and changes m com- 
munications networks. 
· 


5. Allusion to operations in radio operator 
chatter. 
(b) On the basis of the foregoing studies it is 
possible to accurately answer the first two questions, 
Who and Where, and, in some cases find a partial 
answer to the third question, What. However, the 
final answer to the third question can only be found 
with certainty in the message text itself. This is a 
task of the cryptanalyst. 
b. Cryptanalysis is the process involved in con- 
verting encrypted messages into plaintext without 
initial knowledge of the system or key employed 
in the encryption process. The solution of practically 
every cryptogram under these conditions involves 
four fundamental operations: 
(1) The determination of the language used in 
the plaintext version. 
(2) The det'ermination of the general system 
of cryptography used. 
(3) The reconstruction of the specific key in 
the case of a cipher system; or the reconstruction, 
partial or complete, of the code book, in the case of 
a code system, or both in the case of er1~iphered codes. 


(4) The reconstruction or establishment of the 
plaintext. 


2-5. (C) Determination of Language 
a. The determination of the language employed 
seldom comes into question where studies are 
made of the cryptograms of an organized enemy. 
During conventional war when the enemy is known, 
the language employed in messagPs \viii most likely 
be in the enemy's native tongue. Where this is not 
the case, i.e. when cryptograms of ltllkllo\\·n origin 
must be studied, the cryptanalyst looks for indica- 
tions of the language in the cryptogram itself. 
Addresses, signatures, and other data in plaintext in 
the preamble, in the body, or in the postamble of 
the cryptogram may reveal the languagP nsed, as 
well as those external elements assoeiatud with the 
transmission of the message. 
b. In special cases, the nature and composition 
of the cryptographic text may ren<tl tlw bnguage 


used. For example, if the letters K and \Y <He absent, 
the language may be Spanish or Portuguese, as 
these letters are used only to spPll foreign words. 
The presence of special characters in tlw text may 
also indicate the language where the alphabet 
exceeds the Morse code equivalents. For example, 
KATA KANA, a Japenese syllabic \Hiting having 
72 syllabic sounds, requires 48 ~forse code characters 


for radio transmission, creating a form of 
~[orse 


code called Kana :Mo:rSe code. 
c. Knowledge of the lang,!.Iage nscd in <l giVen 


cryptogram is important in two rc,;;pccts. First, 
the frequency of occurrence and ilistinctin' pecular- 
ities of combining individual letters. \'0\\·cls. con- 
sonants, digraphs, and trigraphs. variPs with cliffPrent 


alphabetic based languages, but indi,·iduully are 
rather constant, a feature that becomes the basis 
for analysis. Second, final solution atvl translation 


of the message depends upon the ability to make 
valid assumptions of word usage. 
d. In some cases it is possible to perform certain 
steps before the language of the cryptogram is knO\vn. 
Frequency studies may be made and certain analytic 


processes begun without this knowledge. Final 
solution, however, usually depends on the analyst 
knowing valid combinations of letter,;, ,.;_vllables, and 
· some common military terminology in that bngnage, 


or having available a translator who ean aid him in 
making necessary assumptions based upon his 
special knowledge of the characteristics of the 
language in question. 


2-6. (a( Isolation of the General System 


a. rfe;ermining the general system in which a 
given cryptogram has been enciphered is the most 
difficult step in its solution, except for ,;orne of the 
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simpler basic systems. The solution of every crypto- 


gram involving a form of substitution depends upon 
its reduction to monoalphabetic terms. This is also 
true of combined substitution-transposition ciphers 
and enciphered codes. In the case of transposition 
ciphers, recognition of the system, followed by 
determination of the method of 
t~ansposition is 
required. 
b. To achieve these ends, however, a degree of 
prior knowledge is required; knowledge of how a 
given cryptographic system operates, its character- 
istics, and its limitations. The analyst must be able 
to identify the cryptogram under study as one of the 
basic systems. The knowledge of cryptographic 
systems comes from training and experience; identi- 
fication of a cryptographic system is a matter of 
analytic determination. 
c. Cryptanalysis offers few tests that may be 
applied to a cryptogram to determine positively 
to which class it belongs, particularly in the case of 
two systems yielding externally similar results. 
However, the analyst, if he can identify a system to a 
general class, can usually determine by trial and 


error the exact class to which it belongs. Sooner or 
later most systems can be identified, either because 
of blunders or carelessness on the part of the crypto- 
graphic clerks, or because the accumulation of a 
volume of traffic makes possible its identification 
by cryptanalytic and statistical studies. In the case 
of isolated cryptograms, identification of a system is 


sometim/ matter of a shrewd guess. 


2-7. yz5 Reconstruction of the Specific Key 
Most cryptographic systems use a specific key to 
guide, control, or modify the processing steps of 
the general system. Once the system is known, the 
next step in the solution of a cryptogram is to 
determine the specific key, if used, employed to 
produce the cryptogram. This determination may 
not be required in complete detail; it may be 
sufficient to know the number of alphabets involved 
in a substitution system, or the number of columns 
in a transposition system, or that a code system is 
one-part. In other cases, a complete recovery 
may be desirable for use as a clue to the operation 
of an unsolved related system. In many cases, the 
reconstruction of the specific key and the recovery 
of the plaintext may be simultaneous operations. 
The primary requirement for specific key recovery 
in most cases is to provide the basis for the rapid 
solution of cryptograms enciphered in the system 
using the same key or similar key. 


2-8. (C) Recovery of the Plaintext 


a. In the case of substitution ciphers, this process 
involves establishing equivalency between specific 


letters of the ciphertext and the plaintext, letter by 
letter, pair by pair, etc., depending upon the type 
of substitution cipher involved. In the case of trans- 
position ciphers, the process involves rearranging 
the elements of the ciphertext, according to the 
peculiarities of the system, until the plaintext has 
been recovered. In the case of codes, the process is 
one of determining the meaning of each code group. 
b. The above processes for any system are not 
sequential. The identification of plaintext values 
comes at very irregular intervals. At first, only one 
or two values are recovered and appear scattered 
throughout the ciphertext. These letters form the 


"skefutons" of words, upon which further work, 
continuing the reconstruction process and assuming 
words to be tested, recovers the complete text. The 
recovery of the plaintext is a long tedious process 
involving a great deal of work and analysis. 


2-9. ~Steps of Cryptanalysis 


Any scheme of analysis is based upon successive 
elimination of alternatives, therefore the crypt- 
analyst can only progress as far as the extent of his 
own knowledge of the possible alternatives. Addi- 


tionally, the general procedures and techniques of 
analysis will differ from one system to another due 
to the characteristics of each system that lends itself 
to analytic attack. For these reasons it is difficult to 
specify .which . exact steps will be followed in all 
cases. The most important steps of practical. opera- 
tional cryptanalysis are listed below in outline form. 
These steps appear in the order in which they are 
usually followed, but in particular cases, ,;orne of 
these steps may be interchanged or omitted entirely. 
a. The study of the characteristics of the rne,.;,;age 


text. 
b. The study of any available collateral infor- 
mation. 
c. The search for and study of indicators in the 
message text. 
d. The determination of the type cryptographic 


system used. 
e. The separation and classification of 
mes~ages 


into common groups determined by general system 
or related specific keys. 
f. The search for repetition of groups, symbols 
within and between messages of the same system. 


g. The study of the beginnings and endings of 


messages for stereotypes. 
h. The preparation of statistical counts of mes- 
sage elements. 
i. The reduction of the encrypted text to the sim- 


plest term&. 


j. The test for probable words, stereotypes, and 
isologs. 
k. The recovery of the plaintext. 
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Section Ill. jfZ[ ANALYTIC AIDS 


a. Several different statistical tests, ,tables, and 
many different data listings, are available to the 
analyst as analytic aids. The tests are generally 
used for the initial identification of a system, 
enabling the analyst to identify a system to its par- 
ticular class, substitution or transposition, and in 
some cases allowing the determination of type, 
monoalphabetic or nonmonoalphabetic substitution. 
However, the analyst should understand at the 
outset that the results given by these tests are not 
always absolutely reliable. In certain cases, the in- 


here"l.t characteristics of the ciphertext may be such 
that the test results are misleading if not totally 


fals~. The significance is that the analyst should 
not accept at face value the results of one test. 
Rather, identification should be based on several 


facturs. 


b. In the following paragraphs, the more common 
and immediately useful tests are introduced and 
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explained. In subsequent chapters where the tests 
have specific application, they will again be ex- 
plained in terms of en,ch ca,;e. Also in the same areas, 
other tests which serve a purpose only in a given 
set of circumstances will be explained and the 
techniques of their application discussed. 
c. The lists of data tt:'ed by the analyst in the 
analysis of a cryptogram. and which have general 
application in this context. only are contained in 
the appendixes. As they become applicable they 
will be discussed and their use illustrated. 


2-11. ~Uniliteral Frequency Distribution 
a. The individual letters of any alphabetic-based 
language, when used in intelligible text, occur with 
greatly varying frequency. If, for example, a tabu- 


lation is made of the occurrence of the individual 


letters in the preceding sentence, shown in figure 
2-1, 
the 
variation 
in 
frequency 
is strikingly 
demonstrated. 
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Figure S-1 (U). Frequency tabulation 1 (U). 


If the letters of the second sentence in the preceding 
following occurrence of individual letters w·ill be 
paragraph are tabulated as shown in figure 2-2, the 
found. 
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Figure e-e (U). Frequency tabulation 2 (U). 
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Although a difference in the frequency of occurrence 
of single letters, as reflected in peaks and troughs of 
each distribution, is observable in both distributions, 
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very little difference is observed when the frequency 
of occurrences of given letters in both distributions 
is compared. 
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In both of the distributions, note that certain letters 
occur much more frequently than others. The letters 
A, E, I, N, 0, R, and T occur with the greatest 
frequency. The letters C, G, H, L, P, and S occur 


less often. The letters F, J, K, Q, V, X, and Z occur 
infrequently, or not at all. A degree of sim1lanty 
between the two distributions is greater if the two 
texts used in the tabulation are longer. In fact, when 
two different texts of 1,000 or more letters are com- 
pared, the frequencies of occurrence of individual 
letters show only the slightest variation. Beyond that, 
the practical gain in accuracy does not warrant 
further increase in the amount of text. 
b. The standard uniliteral frequency distribution 
for English telegraphic plaintext, derived from a 
tabulation of 50,000 letters, and reduced to a base 
of 1 ,000 which may be used as a tool in the analysis 
of cryptograms in the English language, is given in 
figure 2-3. 
c. The preceding figures reveal several facts of 
great importance to the cryptanalyst and cryptog- 
rapher. 
(1) The standard uniliteral frequency distribu- 
tion is quite irregular, having marked peaks and 
troughs, points of high and low trequency. 
(2) The relative position within the standard 
uniliteral frequency distribution of the peaks and 
troughs is relatively fixed, determined by the sequence 


of the letters of the alphabet and their frequency 
of usage. 
(3) The relative height and depth of the peaks 
and troughs are also relatively fixed, varying only 
slightly, and this is determined largely by the size 
of the sample tabulated. 
(4) The most prominent crests are marked by 
the vowels A, E, I, and 0, and the consonants N, 
R, S, and T. The deepest troughs are the consonants 
J, K, Q, X, and Z. 
(5) The four vowels, A, E, I, and 0, and the 
four consonants, N, R, S, and T, representing a 
combined frequency of 666 of 1,000 letters, approxi- 
mately one-third of the alphabet, are used in \vriting 
two-thirds of normal plaintext messages. 
d. Should an alphabet be so changed, or used in 
such a manner as to either change the sequence of 
the alphabetic values, or the frequency of usage of 
individual letters, the peaks and troughs would be 
changed accordingly, both in relative order and in 
total value. However, these changes, as will be 
shown in following paragraphs, can be directly re- 
lated to the use of plaintext, as the true values must 
remain constant. 
e. The data given above is based on English 
telegraphic text derived from government adminis- 
trative messages. A similar distribution drawn from 
another source can be expected to show some 
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Vowels: 
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Consonants: 
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Figure 2-3 (U). Standard uniliteralfrequency distribution (U). 


2-6 
CONFIDENTIAL 


~APdla:'IA .. NTIAI- 


variation, the degree of variance being dictated by 
the source. For example, a distribution tabulated 
from messages pertaining to international shipping 
activities is markedly different, caused by the use 
of words peculiar to the business. Also, a distribu- 
tion of a message in a foreign language is different, 
due to the nature of that language's alphabet, 
spelling, and \vord usage. However, for any given 
set of circumstances, which remain constant, a 
standard uniliteral frequency distribution can be 
derived. Variations may occur in each, because of 
volume available for tabulation or subject matter, 
but given sufficient volume, a normal distribution 
can be derived which forms a basis for the initial 
study of a JYptogram. 


2-12. ~ 
Use of the Standard Uniliteral Fre- 
quency Distribution 
Three facts can be determined by a comparison of 
the standard uniliteral frequency distribution to. a 
uniliteral frequency distribution drawn from a cipher 
message composed of letters. First, whether the 


cipher belongs to the substitution or transposition 
class. Second, if substitution, whether the cipher is 
monoalphabetic or polyalphabetic. Third, if the 
cipher is monoalphabetic, whether the cipher com- 
ponent is a standard (direct or reversed) or a mi...xed 


sequence. 
a. The difference between a transposition system 
and a substitution system is that in transposition, 
the plaintext has been rearranged, conventional 
values remaining the same in all ca,;es. In substitu- 
tion, the identities or values of the letters of the 
plaintext have been changed giving rise to the 
ciphertext of the message. Consequently in a trans- 
position cipher, a count of the letters should corre- 
spond closely to the standard uniliteml frequency 
distribution, both in frequency of occurrence of the 
individual letters and in their spatial relationship, 
i.e. the location of the peaks and troughs. 


For example, a frequency count of the follol\-ing 


cryptograms produced by transposition ciphers ap- 


pears in figure 2-4. 


Cryptogram No. 1 
HAMEA EROSY ATVTS DEEET QRDRU USYDP 


1. 
~ 


Cryptogram :LI o. 2 


Cryptogram No. 3 


= 


NPRIO IRXCC PM'l'IS SSLEL VCTEE' 
NEJ:,'AC OOSOO ANFSE OEOYI NSIAT 
SSSYA HRARN LIRWN_ ATNNT OT IRH 
TIODR 


VAAE'I 'l'ZZI."vJO HNEUE' APDEF '.i'OXIL 
YN'l'R'l.' OORTS PLORO ARROiv ECTZL 


REEEA RFAXI OUTER OTSEK JUPPt:,' 
ZSDII IOERE QOOSJ EOLSO SYEIO 


WNILN ROFUF HTUSF TIF1'S SVUOC 
XWERE LERRA DE 


~ 
..... _ 


I 
= 
~ 
Jil iS jj{ 
.. 
:=,;g 
jf;g. 
-=;!- 
;! 
~%~;! 
~ 
- 
~~= 1!"$-it.= 
-~=-~=~~~=~~~~== ~ft 
A B C D E F G H I 
J 
K L M N 0 P Q R S T U V W X Y 
Z 


1 
3 
1 
1 
2 
2 
2 
2 
5 0 6 7 1 6 0 4 7 
2 
1 9 3 3 8 7 
2 
3 
2 
1 8 
3 
3 
4 


r 
5 
ll 


Figure 2-4 <f. U niliteral frequency distribution, transposition cipher ( U) . 
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Converted to an equal base and compared to the 
standard uniliteral frequency distribution, it appears 
in figure 2-5. On this basis one assumed with a certain 
degree of security that the cipher in question is a trans- 
position system rather than a substitution system. 
b. In monoalphabetic substitution ciphers, the 
identities of the letters are changed on a one-to-one 
basis, i.e. Ap may become Xc and Xp may become 
Ac; Ap by definition cannot be represented by more 
than one cipher value. Since the identities of the 
letters are changed, the frequency of appearance of 
the letters are changed. The frequency of appear- 
ance of vowels, and high-, medium-, and low- 
frequency consonants are quite different from what 
they were in the plaintext. This may be seen in 
figure 2-6 depicting a message enciphered in a 
monoalphabetic substitution system, and its ac- 
companying uniliteral frequency distribution. 
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Figure 2-5 ( U). Comparison, standard unilitcral frequency 


• 
distribut1'on and transposition ciphertext ( U). 
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Figure 2-6 ¢j. U niliteral frequency distribution, monoalphabetic substitution cipher ( ['). 


Enlarged to a base of 1,000 by multiplication and 
compared to a standard uniliteral frequency dis- 


tribution, it appears as in figure 2-7. A comparison of 
the two shows that it does not correspond to the 
expected norm. Expected high-frequency letters 
appear as 
low-frequency letters, 
low-frequency 
letters become medium-frequency, and medium- 
frequency letters are both high and low. Close 


inspection will shO\v that the ciphertext still ex- 


hibits marked peaks and troughs, tmd a dd1nite 


spatial relationship exists between them; both are 


characteristics of monoalphabetic substitution where 
only the value of the letters are changed, and conse- 
quently the frequencies of occurrence of individual 


letters are not suppressed. If the system is non- 


~D:oalphabetic, where the possibility exists that 
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Figure 2-7 (U). Cumparison, standard uni/iteral frequency 


distribu(ion and monoalphabetic substitution cipher ( U). 


one plaintext letter is represented by a number of 
different cipher letters, the peaks and troughs are 
suppressed and leveled off. 
c. Once it has been determined that a given 
cipher alphabet is monoalphabetic, represented by 
the text of a cryptogram, the type alphab~t (direct 
or reversed standard, or mixed) can be identified by 
comparing the spatial relationships of its peaks and 
troughs with those of the standard uniliteral fre- 


quency distribution. For example, if the frequency 
distribution for the cipher shown above is moved 
seven places to the right, where Uc corresponds to 
Ap, the peaks and troughs of the two distributions 
can be brought into alinement. This relationship is 
shown more clearly in figure 2-8 where each alphabet 
and its associated frequency distribution is in- 


scribed on two wheels which can be moved against 
one another. 


d. Identification of the use of direct standard 
reversed cipher alphabets and mixed sequence cipher 
alphabets employs the same techniques of comparing 
the peaks and troughs of the cipher alphabets in 
question against those of the standard uniliteral 
frequency distribution. For example, compare the 
cipher alphabets shown below to their associated 
standard uniliteral frequency distributions. In figure 


2-9@, note that the spatial relationships are the 
same, except that the one representing the cipher- 


text is directly reversed, indicating that the alpha- 


betic values it represents are also reversed. In 
figure 2-9®, no matter how the two alphabets are 
placed against one another, alinement is impossible, 
without a rearrangement of the letters of the cipher- 


text. Once this is done, however, peaks and troughs 
can be alined. 


NORMAL 
UNIUTERAL 


FREQUENcY 


DISTRIBUTION 


CIPHER TEXT 


Figure 2-8 r/Point of coincidence, nor-ma/ tmiliteral fre- 


quency distribution and ciphertext ( ( ·). 


2-13. ¢. Variations in a Uniliteral Frequency 


Distribution 
a. In the preceding paragraphs. identification is 
predicated on the fact that usually the frequency 
distribution of a transposition cipher i,; \-ery close 
to that of normal plaintext, while nsuall.'- in a sub- 


stitution cipher they are far different. making identi- 


fication of either a simple matter. This i,.; nut always 


the case, however, for as me,;sages decrra,.;p in length, 
there may be greater and greater departme from 
the normal proportion of vowels, and high-, low-, 
and medium-consonants w,;ed. This :;ituation will 
limit the use of the standard uniliter:ll frequency 
distribution for identification purposes. 


b. Statistical studies show the t-heoretic<tl devia- 


tion from the norm. The following charts, one for 
each vowel (fig. 2-10), and for high-frequency 
(fig. 2-11), medium-frequency (fig. 2-12), <md low- 


frequency (fig. 2-13) consonants, illu::;trate expected 
variations in frequency of occurrence by message 
length. The time of occurrence is :,;hown on the 
vertical line, message length on the horizontal line, 
and maximum and minimum occurrences indicated 
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Figure 2-9@ ( U). Comparison, standard uniliteral distribution and reversed standard cipher alphabet ( U). 
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Figure 2-9® ( U). Comparison, standard uniliteral distribution and mixed cipher alphabet ( U). 


by the upper and lower lines of the graph respec- 
tively. For example, in a plaintext message of 100 


letters, the combined number of vowels appearing 
in it shoul'}Jall within the range of 32 to 48 letters. 


based on the number of nonoccurrences of letters in 
a message. Statistical studies show that a predictable 
number of blanks will occur in plaintext messages, 
the exact number varying with the length of the 
message. Statistical studies also show that the 
theoretical numbers of blanks that will occur in a 


completely random assortment of letters differ from 
the expected number of blanks occurring in plaintext 
messages of equal length. From this information 
the blank expectation chart (fig. 2-14) has been 
devised which compares the expected number of 
blanks in plaintext and in random text, which in 


2-14. _¢ The Lambda (X) Test 
a. The Lambda or blank expectation test is 


another means of determining whether a cipher 
message is monoalphabetic or nonmonoalphabetic. 
It is normally used on messages of 20.0 letters or 
less, assuming that messages of greater length can 
be identified easier by other methods. The test is 
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Figure 11-10 /Expected occurrence of vowels, English plain- 


text (U). 
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s/. Expected occurrence of high-frequency con- 
sonants, English plaintext (U). 


effect is the same as the number of blanks expected 
in a cipher message based on a nonmonoalphabetic 
cipher. 
b. Curve P in the chart indicates the number of 
expected blanks in a plaintext message and curve 
R the number of expected blanks in a random 
(nonmonoalphabetic cipher message) assortment of 
letters. To use the chart, find the number of blanks 
in the message under study. Locate this number on 
the vertical line indicating the number of expected 
blanks, locate the total number of letters in the 
message on the horizontal line, and then locate the 
point of intersection of these two points on the 
chart. Should the point of intersection fall closer to 
the P curve than to the R curve it is probably 
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Figure 11-12 (JJ'( Expected occurrence of medium-frequency 


consonants, English plaintext ( U). 
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Figure 2-13 ~Expected occurrence of low-frequency 


consonants, English plaintext ( U). 


either a simple substitution or a transposition 
cipher. If, however, the point of intersection falls 
closer to the R curve; the message is probably 
enciphered in a nonmonoalphabetic system. 
c. These charts may be used to identify the class 
of a cipher in addition to supplementing the stand- 
ard uniliteral frequency distribution. If the count 
of a class of letters, vowels or consonants, falls 
within the expected range shown by the upper and 
lower lines, it is assumed to be a transposition 
cipher; if outside, it is assumed to be a substitution 
cipher. Basis of reasoning for these identifications 
is the same as used previously, i.e. transposition 
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Figure 2-14. (U). The Lambda (>.) test, expected number of 


blanks occurring in English plaintext ( U). 


does not change the values of the letters while 
substitution does. The degree of accuracy of the 
identification is correlated to the distance that the 
point of intersection of the number of letters and 
message-length falls from or within the delimiting 


;::;?r~: (;;~. 


a. In the preceding examples, identification is 
based largely upon visual observation of character- 
istics present because sufficient depth, that is quan- 
tity of messages in a given cipher, is available. 


However, depth is not always available. Often an 
analyst must work with an extremely small volume 
of traffic, in which case a frequency distribution is 
likely to be inaccurate, due to the insufficiency of 


traffic as well as the normally expected variations 
of occurrence. For such cases, a mathematical test 
has been developed which allows identification of 
monoalphabetic or nonmonoalphabetic quality. 
b. This test is based upon the known frequency 
of occurrence of the specific letters of an alphabet, 
and the premise that these characteristic frequencies 
will be repeated in certain ciphers, even though the 
identity of the letters involved might be changed . 
For example, in English the letter E is normally one 
of the most frequently used letters. If in a cipher 
the letter X was substituted for the letter E, X 
then would appear in the ciphertext as often as E 
did in the plaintext. Also given an alphabet, the 
frequency of random occurrence of each of its letters 
can be calculated by statistical means. This fre- 
quency, random occurrence, represents the number 
of times a letter is liable to appear through pure 
chance alone where the text is solely a random mixture 
of all letters of the alphabet. Thus, two standards are 
available, the plaintext frequency of occuFrence, 
and the random frequency of occurrence, for all 


alphabeta. 


c. The .P test then is a comparison between the 
observed occurrences of the letters, of a cipher 
represented by 1/10, with the expected value of random 
occurrence, represented by .pr, and the expected 
plaintext occurrence, represented by t/Jp. The use of 
the q, test can be seen in figures 2-15 and 2-16. 


OWQWZ AEDTD QHHOB AWFTZ WODEO 
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A 
3 
B 
3 
C f E 


0 
7 
2 
F 
1 
G 
1 


TUWRQ BDQRO XHQDA GTBDH PZRDK 


H 
4 
I 


0 


J 


0 


K 
1 
L 


0 


M 


0 


N 


0 
0 


4 


P ~ R 
1 
6 
3 s 
0 


T 
4 u 
1 


Figure 2-15 (C). The Phi (q,) test, tabulat\on of frequencies (F) of letters (U). 
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3 3 0 7 2 l l 4 0 0 l 0 0 0 
~ l 6 3 0 4 l 0 5 l 0 3 t F = N 


AECDEFGHIJKLMNOPQRSTUVWXYZ 


4 
l 
l 
3 
l 
2 
6 6 0 2 2 0 0 2 0 0 0 0 0 0 2 0 0 6 0 2 0 0 0 0 0 6 l F ( F-l) = ~o 


N = 50 


~0 = 154 


Figure 2-16 cp{ The Phi(</>) test, calculation of q,o (U). 
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d. Observed values of occurrence (q,o) for this 
distribution are calculated by applying the formula 
F(F-1) to the frequency of occurrence (F) of each 
letter and then totaling the sums of all. This is 
expressed 
mathematically as 
<t>o=F~F-1). For 
example, F(F-1) <Po of A=3(3-1)=3X2=6. This 
calculation is applied to each in turn, the individual 
sums then summed to derive the observed values of 
occurrence, <f>o. To determine the values of <Pr and 


<Pp, the formulas <Pr=.0385N(N-1) and <Pp=.0667N 


(N -1) are used, where N is the sum of F of the dis- 
tribution. ¢r gives the value of expected random 
occurrence; <f>p gives the expected plaintext value 
for English military telegraphic text. The constants 
. 0385 and .0667 are valid for English plaintext. The 
former (.0385) is the decimal equivalent of %e, the 
reciprocal of the number of letters in the alphabet. 
The constant .0667 is the sum of the squares of the 
probabilities of occurrence of the individual letters 
in English plaintext. Where a different alphabet 
is involved, these constants are different, though 
the formulas remain the same. The calculations are: 


¢r= .0385N (N-1) = .0385 X 50 X 49=94 


<t>p= .0667N (N-1) = .0667 X50X49= 163 


e. Once the calculations are completed, the values 


for observed occurrence, random expected occurrence, 
and expected plaintext occurrence are compared. 


q,D= 154 


¢r=94 
<f>p= 163 


Since the value of <f>o (154) is clo,.;er tu the nllue of 


<f>p (163) than to the value of <f>r !9-l: 1. the cipher is 
probably monoalphabetic. If it were du:-;er to ¢r, 


a nonmonoalphabetic cipher is indi('<t ted. X on- 
monoalphabetic in this sense refer~ to the cipher 


being any one of the systems li::;ted pre,·iously in 
paragraph 1-11 which are not monoulphabetic. 
If, however, the value of ¢o were just halh·ay between 


<Pr and <f>p no assumption would be made on the 
basis of this test . 
f. The basis for identification ,,·bet her a message 
is moncialphabetic or nonmonoalphabeti,· i::; similar 


to the basis in preceding tests, i.e. thP nonsuppres- 


sion of. frequencies of occurrence 11 lu'tl mntwalpha- 


betic ciphers are used, and their :-'ttppr(',.;::;ion by 


nonmonoalphabetic ciphers. The ,·,due of ¢o ap- 


proaches the value <f>p in cases of tlon:-;nppre::;sion, 


while the value of <f>o approache:-; the ndue of 


<Pr where suppression occurs. The underlying retl::ion 


for the latter is that nonmonoalphabetic systems 


tend to randomize the frequencie::; of observed 
occurrences in ciphertext. 
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PART TWO (C) 


TRANSPOSITION SYSTEMS 


CHAPTER 3 (C) 


GENERAL TRANSPOSITION SYSTEMS 


Section I. (C) GENERAL 


3-1. (cl Transposition Ciphers 


All tr~:position ciphers are alike in several respects. 
First, and most important, all the elements of the 
original message are present in their original identi- 
ties, only disarranged in sequence. Second, the 
individual bits into which the original plaintext 
message is divided by the transposition process are 
normally of equal length. They may be either 
single letters, pairs of letters, sets of letters, or in 
exceptional cases, whole words. Third, practically 
all transposition ciphers involve the use of matrices, 
a geometric design usually a square or a rectangle, 
with specific routes of inscription and transcription. 
The importance of these factors is the degree of 
constancy which they impart to cryptograms pro- 
duced by transposition systems which form the 
basis of their analysis. 


3-2. (U) Monoliteral, Polyliteral, and Word 
Transposition 
Transposition ciphers are classified by the structure 
of the elements manipulated in the transposition 
processes. Those that deal with individual letters of 
the plaintext are monoliteral transposition. Those 
that deal with a component of two or more letters 
are polyliteral transposition. Those wherein the 
elements are word length are termed word transpo- 
sition systems. It is possible to use any length ele- 
ment, as the length of the element does not affect 
the process of transposition. However, the mono- 
literal transposition systems are favored due to 
their practicality and security. 


3-3. (U) Single and Double Transposition 
Single and double transposition, also called mono- 
phase and polyphase, are transposition processes a 
plaintext message may Wldergo to become cipher- 
text. In single transposition, the elements transposed 
go through only one cycle: inscription into a matrix, 


and transcription to ciphertext. In double transpo- 
sition the elements undergo two cycles. The letters 
resulting from the first transposition cycle are again 
submitted to a transposition process. Triple and 
quadruple transpositions are possible but impractical 
for common use. Double transposition, while limited 
in its use due to the same practical considerations, 
does provide a great deal of security; often more 
security than that provided by certain much more 
complicated substitution methods. 


3-4. (~ Geometric Designs 


Most Ar~nsposition systems use matrices for the 


inscription and transcription of the plaintext and 
ciphertext. Squares and rectangles are most com- 
monly used, although other geometric figures, e.g. 
triangles, trapezoids, and other polygons, are occa- 
sionally used. The square and rectangle are far 
superior to the other forms, being easier to use and 
less subject to error in transposition, and, therefore, 
of more practical application. The other geometric 
figures provide a greater degree of security in that 
the relative sequence of the elements comprising the 
plaintext is more completely disarranged leaving 
little positional pattern. However, due to their 


own complexity, they find little use in military 
communications. 


3-5. ((/) Transposition Routes 
a. Jpst as the size and the shape of the matrix 
must be predetermined by the correspondents using 
a transposition system, so must the method of 
inscribing and transcribing the plain and ciphertexts. 
Depending to some degree upon the configuration of 
the matrix used, there are two general methods that 
may be followed: route, or columnar method. 
b. In route transposition, the plaintext message is 
inscribed within a matrix in the usual manner of 
writing, from left to right, top to bottom. Then to 


~~ILl 
~•ru:~~·••-r• a 1 
3-1 
--vv 1111 1 1111 lllilo 111 • • ., 
.. .-.:: .. =--- 


(1) 
Simple horizontal: 
(4) 
Alternate diagonal: 


(1) 
(2) 
(3) 
(4) 
(1) 
(2) 
( 3) 
( 4) 


ABCDEF 
FEDCBA 
STUVWX 
XWVUTS 
ABFGNO 
ONGFBA 
GNOUVX 
XVUONG 


GHIJKL 
LKJIHG 
MNOPQR 
RQPONM 
CEHMPU 
UPMHEC 
FHMPTW 
WTPHHF 
MNOPQR 
RQPONM 
GHIJKL 
LKJIHG 
DILQTV 
VTQLID 
BEILQS 
SQLIEB 
STUVWX 
XWVUTS 
ABCDEF 
FEDCBA 
JKRSWX 
XWSRKJ 
ACDJKR 
RKJDCA 


(2) 
Alternate horizontal: 
( 5) 
( 6) 
( 7) 
( 8) 


ACDJKR 
RKJDCA 
JKRSWX 
XWSRKJ 


( 1) 
(2) 
(3) 
(4) 
BEILQS 
SQLIEB 
DILQTV 
VTQLID 
ABCDEF 
FEDCBA 
XWVUTS 
STUVWX 
FHl-1PTW 
WTPMHF 
CEHMPU 
UPNHEC 


LKJIHG 
GHIJKL 
MNOPQR 
RQPONM 
GNOUVX 
XVUONG 
ABFGNO 
ONGFBA 
MNOPQR 
RQPONM 
LKJIHG 
GHIJKL 


XWVUTS 
STUVWX 
ABCDEF 
FEDCBA 
(5) 
Spiral clockwise: 


(3) 
Simple diagonal.: 
(1) 
( 2) 
(3) 
(4) 


ABCDEF 
L\lliOPA 
DEFGHI 
IJKLMH 


(1) 
( 2) 
(3) 
( 4) 
PQRSTG 
KVWXQB 
CRSTUJ 
HUVWXO 
ABDGKO 
OKGDBA 
GKOSVX 
XVSOKG 
OXWVUH 
JUTSRC 
BQXWVK 
GTSRQP 
CEHLPS 
SPLHEC 
DHLPTW 
WTPLHD 
NHLKJI 
IHGFED 
APOrH1L 
FEDCBA 
FU1QTV 
VTQMIF 
BEIMQU 
UQMIEB 
JNRUWX 
XWURliJ 
ACFJNR 
RJ."1JFCA 
(6) 
Spiral counterclockwise: 


(5) 
(6) 
(7) 
(8) 
( 1) 
(2) 
(3) 
( 4) 


ACFJNR 
RNJFCA 
JNRUWX 
XWURUJ 
APONML 
FEDCBA 
NMLKJI 
IHGFED I 
BEIMQU 
UQMIEB 
FIMQTV 
VTQMIF 
BQXWVK 
GTSRQP 
OXINUH 
JUTS PC 


DHLPTW 
WTPLHD 
CEHLPS 
SPLHEC 
CRSTUJ 
HUVWXO 
PQRSTG 
KVWXQB 


GKOSVX 
XVSOKG 
ABDGKO 
OKGDBA 
DEFGHI 
IJKLMN 
ABCDEF 
LMNOPA 'I 
------- 


Figure 3-1 cf. Matrix routu (U). 


form the ciphertext, the letters in the design are 
taken out of the matrix transcribed by following one 
of many different routes. Each route may have a 
different starting point and follow a different path 
through the matrix, with the only consideration 
being that it be orderly and fiXed. Dependent upon 
the agreement among the correspondents, the use of 
routes are either fixed or varied at a given interval. 
A few typical routes which are used are shown in 
figure 3-1, and for ease in following their paths, the 
normal sequence of the alphabet is used. 
c. Columnar transposition differs 
from 
route 
transposition in that the path of extraction is based 
upon the columns of the matrix. Again inscription 
is normally in the usual form of writing, although it 
may be varied by any route other than vertical, and 
then transcribed vertically from the cells of the 
matrix to obtain ciphertext. The sequence in which 
the columns are extracted from the matrix may be 
varied: either by following preassigned directions; 
top to bottom, bottom to top, etc.; or by the use 


of special keys which determine columnar orrier; or 
even by a combination of the two. Two of the more 
common vertical routes are illustrated in figure 3-2. 
d. The indication for the correspondents of the 


(1) 
Simple vertical: 


( 1) 
(2) 
(3) 
(4) 


AEIHQU 
UQMIEA 
DHLPTX 
XTPLHD 
BFJNlW 
VRNJFB 
CGKOSW 
WSOKGC 
CGKOSW 
WSOKGC 
BFJNRV 
VP.liJFB 


DHLPTX 
XTPLHD 
AEIHQU 
UQriTEA 


(2) Alternate vertical: 


(1) 
(2) 
(3) 
(4) 


AHIPQX 
XQPIHA 
DEU1TU 
UTHLED 
BGJORW 
WROJGB 
CFKNSV 
VSNKFC 
CFKNSV 
VSNKFC 
BGJORW 
WROJGB 
DELl1TU 
UTMLED 
AHIPQX 
XQ'PIHA 
---- 


Figure S-S (C). Columnar extraction routes (U). 
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use of a given transposition system (single or 
double), the type transpositions (route or columnar), 
and the specific route or key used are functions of 
the discriminant and specific key. In most cases, 
the discriminant refers to the use of a given trans- 
position system and its type, while the specific key 
refers to the specific route or key used in the in- 


scription and transcription processes. As required, 
either or both may appear in the message. They 
usually occur at a specific point in the message 
text, sometimes so constructed that to the outsider 
they appear as a legitimate part of the text. At 
other times they are easily recognizable for what 
they are. 


Section II. cp ROUTE TRANSPOSITION SYSTEMS 


3-6. <Jt{ Encipherment and Decipherment 
despite the apparent variability afforded by chang- 
a. The encipherment and decipherment steps in 
ing the dimensions of the matrix, the routes of 
route transposition are based upon the use of fixed 
inscription and transcription, and the 
starting 
matrices and routes; the latter process is a reversal 
points. For example, observe the cryptogram just 
of the former. To illustrate how the system is used, 
produced. The briefest examination would quickly 
the following steps are illustrated. The system in 
reveal three words, ATTACK, HAS. and TO:\IOR- 


this case, to be indicated by a discriminant, is 
RqW. In all cases the plaintext would not be so 


single route transposition. The specific key indicates 
readily identifiable, but sufficient fragments would 
the following elements are required. 
occur to enable the analyst to solve the cryptogram 
(1) A completely filled matrix of 5 rows and 8 
with little difficulty. 


columns. 
~ 


(2) A route of inscription following an alter- 
3-7. ( 
The Use of Nulls 


nate diagonal, as shown in figure 3-1, route (4)-(3). 
a. 
ulls are symbols appearing in cryptographic 
(3) A route of transcription following an alter- 
texts which have no plaintext value. They are usually 
nate diagonal, as shown in figure 3-1, route (3)-(6). 
similar in appearance to the other elements of the 
b. Inscription of the plaintext is as follows: 
cryptographic text. Nulls may be used to complete 


ATTACK HAS BEEN POSTPONED 
TOMORROW TWO AM 


0 s· T I 0 W AM 


HPTNLRTO 


KANPUTRW 
T C S E 0 D 0 0 


ATABENEM 


UNTIL 


c. Transcription to obtain ciphertext is as follows: 


OSTIOWAM 
HPTNLRTO 
KANPUTRW 
T C S E 0 D 0 0 
ATABENEM 


MOA WT WORRO MOTLI EDUNT NOPTS 
EENPO BSAHA CKTTA 


d. Decipherment is merely a reversal of the 
preceding steps. The cipher message is inscribed 
in a 5 x 8 matrix following route (3)-(6), then 
transcribed follow·ing route ( 4)-(3), thus regenerating 
the plaintext. Using this system requires both 
remembering a series of rules, and following these 
rules explicitly. Any deviation in either process 
creates some difficulty in deciphering the message 
with the difficulty proportional to the error. 
e. Of all the transposition systems, route trans- 
position of this type probably offers the least 
resistance to the cryptanalyst. This remains true 


a matrix in transposition systems, to pad a text for 
purposes of security, or where service regulations 
require, to form groups of equal length. It is common 
to find that a transposition system provides a greater 
number of cells than letters in the message to be 
enciphered; or that the number of letters in the 
message are not divisible equally by group length. 
In either case nulls are often used. When n1dls are 
used in transposition systems they must be inserted 
in the matrix at the same time as the pl:tintext, and 
extracted with the plaintext to form the ciphertext. 
Adding the nulls after the ciphertext ha,.; been 
generated will result in changing the ,.;eq uence so 


that the message is either difficult or impo,:;sible to 
decipher. 
b. As transposition ciphers are only 
rl'~trranged 


plaintext, exhibiting all the normal frequencies of 
plaintext, the letters chosen for nulls are limited. 
Letters of very low frequency, such as .T, K. Q, X, 
or Z in English, are normally avoided. <ts their 
overuse may make them recognizable fnr what they 
are. High- and medium-frequency letter,.; ,.;erve best 
as nulls, but they are limited in their pl!tl·ement. To 
avoid the possibility of misinterpretations llr errors 
in spelling in the text proper, nulls are generally 


placed in the last positions. 


c. When nulls are employed solely for the purpose 
of making cryptanalysis more difficult. they may 
appear at any position within the message text. To 
insure the identification by concerned corre,;pondents 


-,. CONf"l D·ENTIAL 
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nulls are usually placed in prearranged positions, 
although the placement may be random if the 
system permits. For all practical purposes, however, 
the use and placement of nulls concern the cryptog- 
rapher more than the cryptanalyst. They add to 
the length of the text to be enciphered, possibly 
induce errors, and cause the user, whose time is of 
the essence, difficulty in deciphering. Increase in 
security by their use is questionable. 


shown. Two examples are reversed writing and 
vertical writing; the latter in horizontal form is 
also known as the rail-fence cipher. Both systems 
are extremely simple from the cryptanalytic view- 
point, but they illustrate that a given method of 
encipherment may duplicate the results produced 
by another method. Thus, the cryptanalyst may be 
able to solve messages accurately, yet not have 
recovered the original system that produced it. Also, 
a solution devised for one type system may be equally 
3-8. ~pecial Cases of Route Transposition 
valid applied to another type. 
a. The effects of route transposition may be ob- 
b. The procedures of reversed writing are illus- 
tained by methods other than those previously 
trated in figure 3-3 by enciphering this message: 
BRIDGE DESTROYED AS DIRECTED 


(1) 
Reversed retaining original word length. 
DETCERID SA DEYORTSED EGDIRB 


(2) 
Regrouping the words in cipher text of five letters. 
DETCE RIDSA DEYOR TSEDE GDIRB 


(3) 
Reversing words retaining their original length. 


EGDIRB DEYORTSED SA DETCERID 


(4) 
Regrouping the reversed words in cipher text of five letters. 
EGDIR BDEYO RTSED SADE1' ~RID 


Figure 9-3 cp. Reversed witing (U). 


c. The ciphertext produced by method (2) above 
is duplicated by: 
text through the use of route transposition illustrates 
that, although the external appearance of the two 
methods differ, their products are the same. 
Inscription 1 
2 
3 
4 
5 


B R I D G 
5 
ED E S T 
4 
R 0 Y E D 
3 
A S D I R 
2 
E 0 T E D 
1 Transcription 


d. The method of achieving the same message 


e. During the Civil War an interesting form of 
reversed writing, involving the use of phonetics 
shown in figures 3-4 and 3-5, was employed on 
several occasions. The following message, allegedly 
sent from President Lincoln to General Burnside, is 
an example: 
Washington, D.C. 


November 25, 1862 


BURNSIDE~ FaLmouth, Virginia: 
Can Inn ALe me withe 


2 oar our Ann Pas Ann me jlesh ends N. V. Corn Inn 


out with U cud Inn heaven day nest Wed roe Moore 


Tom darkey hat Greek Why Hawk of Abbot Inn B ahewed 


I if. 


)ates 


Figure 9-4 <jfJ. Reversed phonetic tiJTiting (U). 


Reading the message backward with the stress on the 
phonetics the recipient reads the message as: 


3-4 


It I should be in boat off Aquia Creek at dark 


tomorrow (Wednesday) evening, could you, with- 
out inconvenience, meet me and pass an hour 
or two with me? 


A. Lincoln 


Figure 9-5 ~lainte:r:t, reversed phonetics (U). 
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f. A system of more practical worth, when 
compared to that above, is vertical writing or the 
rail-fence cipher. The message, "BRIDGE DE- 


STROYED AS DIRECTED," when enciphered in 
these systems appears as in figure 3-6. 


Variation is extended simply by increasing the 
length of each diagonal rail: 


B 
R 
I 
s 
s 
ET 
AD 


·D 
R 
D 
I 
DE 
OE 
G 
y 
R 0 


E 


D 
E 
T 


Although different groups would be generated 


(BSSDR ETADE etc.), the system produces the 
same results as route transposition and is susceptible 
to the same security failures. 


(1) 
Vertical writing: 
BR 
ID 
GE 
DE 


ST 
RO 


YE 
DA 


SD 


IR 
EC 
TE 
D 


(2) 
Rail-fence cipher: 


BIGDS RYDSI ETDRD 


FETOF ADPCE 


B I 
G D S R Y D S I 
E T D 
R D E E T 
0 
E A D R C E 


Figure 3-6 <t . Vertical writing ( U) . 


Section Ill. ~ COLUMNAR TRANSPOSITION SYSTEMS 


3-9. (ch General 
Colu~~r transposition differs from route trans- 


position in that the transcription of the plaintext 
from the matrix is based exclusively upon column 
order. One of the most common types of columnar 
transposition involves the use of a key to randomize 
the transcription of tP.e columns. The purpose of 
columnar transposition is to introduce a greater 
degree of security than is afforded by either the 
route or straight sequential columnar methods. 
The use of a key, either numeric or alphabetic, 
provides a wider latitude for variation in the vertical 
route, yet serves as a controlling factor to coordinate 
the transposition process between several correspond- 
ents. Of primary interest to the analyst is that it 
also serves to limit the width of the matrix; the 


height then being the product of dividing the 
approximate message length by matrix width. 


3-10. ~ 
Keywords and Numerical Keys 
a. N"'n~erical key is composed of a sequence of 
numbers, either sequential or random and is used 
to control certain cryptographic operations. To 
preclude the necessity of carrying a l<;mg sequence 
of random numbers in written form, cryptographers 
have devised a simple method of deriving such 
sequences from words, phrases, or sentences, which 
can be remembered much more easily than the 
sequence of numbers. This memory aid is known as a 
keyword or keyphrase, whichever the case may be; 
and from a prearranged key, a series of numbers 
can be derived, as shown below: 


KEYWORD 


NUMERICAL KEY 


H E A D Q U A R T E R S 


6 
4 
1 3 
7 12 2 
8 11 5 
9 10 


The numerical key is derived by assigning numbers 
in sequential order to the letters of the keyword in 
their alphabetic order. Thus A is assigned the 
number 1, and since A is repeated in the keyword, 
it is assigned 2 at its next position. Alphabetically 
D follows A, so it is assigned the next available 
number, 3. The process is continued until each letter 
has been assigned a number, no number being 
repeated. 
b. Tht> method of deriving a numerical key from a 


literal key as shown above is only one of a number 
of methods, but it is the most com:r.nonly used. 
The same technique may be applied to phrases or 
to sentences so that a very long numerical key, 
impossible to remember ordinarily, may be generated 


at will. So far as the cryptanalyst is concerned it is 
not essential to know how a key was derived in a 
specific case, except when this knowledge will enable 
him to generate additional keys for the solution of 
other messages .. Often, as will be demonstrated in 
subsequent paragraphs, he may be unaware that a 
literal key has been used as the basis for a numerical 
key, or if aware of this, be unable to recreate the 
true literal key by analysis of available information 
alone. 
c. Several general factors enter into the selection 
of literal keys which are of interest to the crypt- 
analyst, and which can under certain circumstances 
prove of value. 


CON Fl DENTIJ'.L 
3-5 


468·095 0- 7Z- 3 


'CONFIDENTtAL 


(1) It is usually such that it can be remembered 
3-11. f!l{ Use of Keys With Completely Filled 


easily. 
Matrices 
(2) Normally it contains as few repeated letters 
or words as possible. 
(3) It usually consists of one or more simple 
familiar words or phrases, which admit only one 
spelling and one order. 


(4) It should present no direct association with 
the special situation in which it is used, so as not to 
be easily assumed. 


a. In keyed columnar transposition, where a 
completely filled matrix is used, the letters are 


written into a matrix, a square or a rectangle with 
nulls being added to complete the matrix or to 
provide the requisite number of characters to form 
complete groups; then transcribed vertically by 
following the sequence of columns as determined by 
the numerical key. For example, in figure 3-7, a 
message is enciphered by this method. 


Message 
REPORT LOCATION OF SECOND BATTALION 
CO~llUUlD POST TODAY 


Keyword 
Numerical Key 


L I B E R T Y 


4 3 1 2 5 6 7 


REPORT£ 
OCATION 
OFSECON 


DBATTAL 


IONCOMM 
ANDPOST 
TODAYDN 


Cipher Text 
PASAN DDOTE TCPAE CFBON OROOD 


IATRI CTOOY TOOAM SDLNN ll4TN 
f Keyed columnar transposition (U). 
Figure 3-7 


b. To decipher such a message, a matrix of the 
proper size must first be constructed. In this case, 
since the key contains 7 numbers and the message 
has 49 letters, the matrix must be a 7 x 7 square if 
the rectangle is completely filled. After constructing 
the matrix, the message is inscribed in it, starting 
with the first group of the message and following 
the sequence of columns indicated by the numerical 
key. Once the inscription is completed, the message 
can be read horizontally. 
c. The results produced by this method may be 
varied by one or a combination of changes in the 
keyword and in the routes of inscription and tran- 
scription. However, all things being equal, variation 
is most often introduced by changes in the key. A 
change of key on a daily basis, or for each message, 
is possible by preparing a whole list of keys for a 
given period, a different key being used in each case. 
It is also possible to designate the specific key to 
be used from a. prepared list of keys through the 
use of an indicator in the message, inserted in a 
prearranged position of the message text. This last 
procedure has one disadvantage, however. If the 
indicator is erroneously transmitted, the message 
may be impossible to decipher, in which case the 
recipient must either ask that the message be re- 


transmitted or ask that the key indicator be con- 
firmed. In both cases the indicator mav be revealed. 


3-12. )i' Use of Keys With lncom~letely Filled 


Matrices 
a. The degree of cryptographic security of keyed 
columnar transposition is increased if the matri.x 


is not completely filled, the number of cells in the 
matrix exceeding the total number of letters in the 
message. This increased security creates more diffi- 
culty for the cryptanalyst in determining the di- 
mensions of the matri.x, and the corresponding length 
of individual columns once width is assumed or 
proved. Where this system is used, cells which will 
be left blank must be specified. 
b. Normally the system operates as sho\nl m 
figure 3-8. 
c. To decipher the message the cryptographer 
must know the key and the position ,,·here cells 
will be left blank. Knowing that the key contains 


7 letters and the message 30 letters, he can de- 
termine the dimensions of the matrix to be 7 x 5, 
35 cells, 5 more than needed. Constructing a matri.x 


of this size, he crosses off the blank cells and in- 
scribes the cryptogram in the remaining open cells 
in the order predetermined by the key. 
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Message: 
Keyword: 


REQUEST IMHEDIATE REINFORCEMENTS 
P R 0 D U C T 
Numerical Key: 
4 5 3 2 7 1 G 


REQUEST 


IMMEDIA 


TEREitJF 
ORCENEN 


T S 


Cipher Text: 
SINEU EEEQM RCRIT OTE/<·fE RSTJ..F NEDif.' 


Figure 3-8 (C). Keyed columnar tra~po~ition with incompletely filled matrix (U), 


4 5 3 2 7 
1 6 
- 
- Q u - s - 
M E - 
I - 
- 
E - 
N - 


- 
E - 
E - 
# # # # # 


d. To illustrate the importance of adding nulls in 
transposition systems prior to the transcription 
stage, figure 3-9 depicts what could occur if nulls 
were added after the encipherment process. 
e. Note that the addition of three nulls to com- 
plete the last group results in the destruction of 
the orderly sequence of the reencription process, 


compounded by the use of keys, thus making the 
message indecipherable. The cryptographer hn.s tv.ro 


options, ask for a retransmission of the message or 
attempt solution by eliminating the nulls, \Vhich 


requires their identification first. The former case 
provides clues for the cryptanalyst. 


3-13. (C) Variations on Columnar Methods 
A variation of columnar methods, either straight or 
keyed, may be obtained by writing the message out 
and extracting cryptographic text by decimation or 
by assigning the numerical key to individual letters, 
repeating its sequence as required. 
KEY 
4 
5 3 
2 7 
1 6 4 5 3 2 7 
1 6 4 
5 3 
2 
7 
1 6 4 
5 3 
2 
7 
1 
6 
4 
5 
R E Q U E S T I M M E D I 
A T E R E 
I 
N F 0 
R C E M E N T 
S 


The letters are taken out in order, all those with the 
same number at the same time, in the order of their 
appearance in the text. 


1 1 1 1 2 2 2 2 3 3 
3 3 4 4 4 
4 4 5 5 5 etc. 
S I N E U E E E Q M R C R I T 0 T EM E etc. 


The process results in the same text as derived from 
the incompletely filled matrix illustrated in figure 
3-8. If the letters are extracted by decimation, i.e. 
every letter which occurs at a given interval, the 


results are the same as straight columnar transposi- 
tion, the width of the matrix equal to the interval 
of the decimation. 
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CDN Fl DENT I At::- 


Message: 
COt-lMAND POST LOCATED AT ROAD JUliCTION 


Hatrix : 
A L P H A B E T 
1 6 7 5 2 3 4 8 


C0!1MANDP 
OSTLOCAT 


EDATROAD 


JUNCTIO!l 


Cipher Text: 
COEJA ORTNC OIDAA OMLTC OSDUM TANPT DNROH 


Nulls: 
ROH added after transcription to complete last group. 


ALPHABET 
1 6 7 5 2 3 4 8 


CSALOCAN 
ODNTROAR 
EUPCTIOO 


JMTONDMH 
AT D 


Decipherment produces unintelligible plaintext: 


CSALOCA NODN TROAR ••• etc. 


Figure 9-9 <t Addition of nulls after enciphmnent (U). 
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CHAPTER 4 )¢ 


SOLUTION OF SINGLE TRANSPOSITION SYSTEMS 


Section I. <t;/ PRINCIPLES OF SOLUTION 


4-1 . (d Review of Characteristics 
a. P'!t~r to attempting the solution of any crypto- 
gram, the analyst reviews exactly what is known 
concerning the basic operation and characteristics 
of the system which produced that cryptogram. 
This general information, plus any foreknowledge 
of the possible contents or subject matter of the 
message, will determine to a great degree methodol- 
ogy and rapidity of solution. The general charac- 
teristics covered to this point are: 
(1) Transposition ciphers are a rearrangement 
of plaintext, therefore they will exhibit all the fre- 
quency characteristics of plaintext. 
(2) The process of encipherment consists of 
two stages, inscribing the plaintext into a matrix, 
and transcribing ciphertext from the matrix. 
(3) The routes of inscription and transcription 
are fixed, and each differs from the other. 
( 4) Normally the matrix is either a square or a 
rectangle, and if the latter, not remarkably distorted. 
(5), The dimensions of the matrix are deter- 
mined by either the message length or by the length 
of message divided by key length. In those cases 
where an incomplete matrix is used, the dimension 
may be slightly larger in the vertical plane. 
(6) Nulls may be inserted to complete a matrix 
or to even group lengths, thus usually limiting their 
number. 
(7) Nulls are inserted prior to the encipher- 
ment process; accordingly their identification is not, 
except in rare cases, critical to the solution of the 
message. 
b. With these known characteristics, the analysis 
of transposition systems becomes one of initial 
identification, determination of the matrix dimen- 
sions, anagramming to recover the plain text, and 
finally, key and route recovery. 


4-2. (_¢ Identification 
Transposition systems as a class are not difficult to 
identify since cryptograms produced reflect the 
characteristic frequencies of plaintext. The stand- 
ard uniliteral frequency distribution, given in para- 


graph 2-13, usually suffices to identify one com- 
posed of English letters. For other languages special 
frequency distributions drawn up for them would 
serve the same purpose. As a matter of course, one 
of the first things the cryptanalyst does when 
attempting solution of any unknown system is to 
make a frequency distribution or test of the crypto- 
gram under study. 


4-3. (~ Determination of Matrix Dimensions 
a. f/:t~e it is established that a given cryptogram 
is produced by a transposition system, the second 
step toward solution is the determination of the 
matrix dimensions. Where completely filled matrices 
are involved this is a relatively simple matter, for 
the dimensions, width times height, must equal 
message length. The only problem incurred is to 
determine which factors to select. 


For example, if the message contains 96 letters, 
possible dimensions of the matrix are: 8 x 12, 12 x 8, 
6 X 16, 16 X 6, 4 X 24, 24 X 4, or 48 X 2 and 2 X 48. 
In actual practice, the matrix dimensions probably 
would be a combination of the factors 12 and 8, 
or 6 and 16, rather than the other possibilities. 
The distorted rectangles represented by combi- 
nations of 24 x 4 and 48 x 2 produce a cryptogmin 


similar to the vertical writing or rail-fence cipher 
discussed previously. In most cases the final solution 
to this problem lies in limiting the choice::;, and then 
eliminating incorrect assumptions by trial 
and 
error. 
b. Where incompletely filled matrices are used, 
an additional problem of determining the dimensions 
of the matrix is introduced. Determination may be 
based upon finding two factors "·hich will equal 
message length plus a number, corresponding to 
the blank cells, which is not greater than the ttssumed 


value of matrix width. For example, note the sequence 
of letters, indicated by number for clarity, and the 
occurrence of blank cells in figure 4-1. 
c. ~latrix 1 contains a total of 64 cells, of which 
only 60 are required, leaving 4 as blanks. .Yiatrix 
·-CONFIDENTIAL - 
4-1 


--CONFIDENTIAL 


1 2 3 4 5 6 7 8 


1 2 3 4 5 6 7 8 
9 10 11 12 13 14 15 16 


9 10 11 12 13 14 15 16 
17 18 19 20 21 22 23 24 


17 18 19 20 21 22 23 24 
25 26 27 28 29 30 31 32 


25 26 27 28 29 30 31 32 
33 34 35 36 37 38 39 40 


33 34 35 36 37 38 39 40 
41 42 43 44 45 46 47 48 


41 42 43 44 45 46 47 48 
49 50 51 52 53 54 55 56 


49 50 51 52 53 54 55 56 
57 58 59 Go 


57 58 59 60 


Figure 4-1 (U). Letter sequence, inccrmpletely filled matrices (U). 


2 contains a total of 72 cells, a surplus of 12. Follow- 
ing the normal procedure for inscription, the last 
row and the four cells at the extreme right of the 
next-to-last row in matrix 2 are left blank; and the 
last four at the extreme bottom right of matrix 1 
are left blank. In both cases, assuming the same key, 
the cryptograms produced from either matrix are 
similar in all respects to the other. 
d. Therefore, in those cases where blank cells 
occur in a matrix, a greater variation in dimensions 
is expected. However, as extra rows equal to the 
width of the matrix are of no consequence in the 
encipherment process, a certain limitation does 
exist. For example, in the case of a message of 60 


letters, matrix dimensions could be 8 x 8, 9 x 7, 
7 x 9, 11 x 6, 13 x 5, 14 x 5, 16 x 4, 17 x 4, etc. In 
each case dimtmsions give an excess of 60 cells, yet 
the total number of blank cells does not exceed the 
total cells in a row. Final determination of the 
correct matrix is one of trial and error starting with 
the square and nearly-square rectangles. 


4-4. (JZ{' Anagramming 
a. Having determined possible matrix dimensions 
and possible column length, the analyst attempts 
recovery of the plaintext through a process termed 
anagramming, which simply returns the plaintext 
letters to their normal position within the matrix. 
b. The process of anagramming uses the follow- 
ing factors: 
(1) The column totals times number of letters 
in eac.tt column is equal to message length. Therefore, 
if the analyst's assumption of matrix dimensions is 
correct, he can reconstruct the original columns 


simply by dividing the message in letter length 
elements that are equal to the height of the matrix. 


(2) All letters in a given column follow one 
another in an orderly fixed sequence, a result of the 
horizontal inscription, and thus cannot be changed 
without changing the length of the column. In this 
case, the sequence of the letters are not disturbed. 
Only the column in which a letter or a seril•s of letters 
might appear is changed. 
(3) The letters that appear in a gtvPn row, 
when a number of assumed columns an• brought 
together, can be changed in only two w:ty,; First, 
the letters may be changed only by a clwtlg'l' in 
column length. Otherwise they must n•nwin fixeJ. 


Second, the sequence of their appeanutc•· in a 


given row can be changed only by the r0arrangernont 


of the order in which the columns arc juxtapo,.;ed; 


a change which will result in changing t h·· ,.;pfttwnce 


of the letters in all the rows. 
c. As anagramming involves the spt>lling t\\tt of 


complete words from fragments and individtwl !Ptters 


that appear at random in each row, the tuwlyst can 
use the vowel-consonant ratio, a stable ch:trncter- 


istic exhibited by all alphabetic lunguugt•s. In 
English, this ratio is 40 to 60, 40 perct~nt \-,)\\·pl,; to 


60 percent consonants. As the plaintext j,.. irtsnibed 


horizontally, the vowel-consonant ratio \\ill ()l'Cttr' in 
the rows of a matrix. This phenomonon tlwr1 st>rves 


as a check .of the accuracy of the assumt•d matrix 


dimensions. A count of vowels and cons()nunts in 
each row is made and compared to the Pxpected 


ratio. Should all the ratios fall well on tside that 
expected, the rows may be changed, but only by 


. ..changing the column length, until reasonable ratios 
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appear. It must be expected that the exact vowel- 
consonant ratio will not always appear, particularly 
where such small samples are involved; but, on the 
other hand, the ratios should not be extremely 
distorted either. 


4-5. ~ecovery of the Key 
Recovery of the key is not essential to the solution 
of transposition systems. In fact, it is possible and 
is usually the case that when a given cryptogram is 
solved, the key recovery never proceeds further 
than the recovery of the numeric key. This is the 
literal key from which it was drawn and is either 
unrecognized or unrecoverable with the information 
available to the analyst. Where variations of a basic 


Message: 


key are involved, recovery becomes possible and, in 
terms of speeding subsequent solutions of related 
cryptograms, very profitable. 


4-6. Jli!{ System Identification 
a. System identification is always the first step 


unless the basic system is known \\·ithout a donbt. 


As a matter of course, where the identity of a system 


is suspect but not assured, a test is Hsed to confirm 


its identity. This may take time but, when considered 
in relation to the time spent in attempting to solve 
a system with completely inappropriate methods, it 
is time well spent. Prior to conducting any test, 
any element not part of the text must be eliminated 
to avoid the possibility of distorting test results. 


VASCO 
SMPET 
ESOER 
IRPBD 


DEEEW 


UOUTE 


ARNTR 


ESLUR 
UOEOO 
VASCO 


Q F V R."f 
fiERY 


ABSZO 


TD !OM 


OCSWH 
EERON 


IE LF 0 
TZHM I 


RRERG 
RN A~i\1A 
RETON 
QFSSD 


An examination of the message reveals a repeated 
group "VASCO" appearing in the first and last 
position. Although it is similar structurally to the 
other groups, its separate appearance and the posi- 
tions in which it occurs, are indicative of a specific 


key. 
Therefore, 
these groups 
<tre 
immediately 
eliminated. Using the remaining 20 groups. a uni- 
literal frequency 
distribution is 
made 
of 
the 
ciphertext, see figure 4-2. 


~ 
- 
~ 
%=- 
- 
- 
~ 
~ 
!- ~ 
~$.~- 
=- = = - 
- ': - - 
= - 
---- --- 
- 
- 
-- 
--- 
ABCD EFGHIJKLl·fN OPQ RSTUVW 


4 2 1 4 14 3 1 2 6 0 0 2 5 4 11 2 2 14 7 6 4 1 2 


Figure 4-2 (U). Uniliteral frequency distribution, ciphertext (U). 


X Y Z 


0 1 2 


b. Comparing this uniliteral frequency distribu- 
tion with the· standard uniliteral frequency dis- 
trihution (based on 100 English plaintext letters) 
reveals similar characteristics, see figure 4-3. 


= 
~ 
= 
== 
=-= 


~ ==~=-=# =-=== ~=~=-- 
~--- ~---T3 
=-+=;r=- 
=1=-r=t=--- 
- 
A B C D g F G H I J K L ,-.: ,; 0 P Q R S 't U V W X Y Z 
7 1 3 4 13 3 2 4 7 o o 4 2 a a 3 o 0 G 9 3 2 2 o 2 o 


Figure 4-3 (U). Standard unzlztaal frequency distribution (U). 


The deviations that exist are not radical and can 


be accounted for by the smallness of the sample. 
The sample exhibits the same characteristic peaks 
and troughs of English plaintext, and the vowel 
consonant ratio appears very good. Therefore, the 
assumption that the cryptographic system is trans- 
position is quite safe, unless proven contrary in the 
analytic stages. 


4-7. (o( Recovery of Matrix Dimensions 
a. ~:uming the system under study is a com- 
pletely filled matrix, the dimensions are easily 
determined. The combination of 10 x 10 is the most 
likely one which will provide a matrix of the proper 


,;ize, though combinations of 20, 25, and 50 are 
possible. A matrix of 10 x 10 dictates that there be 


10 columns, each containing 10 letters. Accordingly, 
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the message is divided into 10-letter lengths and 
transcribed to the vertical position, each correspond- 
ing to an assumed column. Just as the ciphertext is 
originally removed from the matrix by columns, this 
process is merely a reversal of the enciphering process. 
For ease in identifying the columns during later 


manipulation, they are numbered as they are with- 
drawn from the message. 


1 
2 
3 
4 
5 
6 
7 
8 
9 10 
U 0 S I R E I I T Q 
OOMINSERDF 
U S P E A L L P I S 
TWERMUFBOS 
EHTYARODMD 
QRAEEARUTD 


F R R E S B E 0 Z E 
VENROSTEHE 


R .R T 0 E Z 0 0 M E 
MGRNRONOIW 


b. At this stage, if the message is enciphered by a 


straight columnar route transposition, it could be 
read out of the matrix along the horizontal rows. 
Therefore, since it is unreadable in its present form, 
it is assumed that the system is keyed columnar 
transposition. The plaintext would not then appear 
without first rearranging the sequence of the columns. 


4-8. ~nagramming To Recover Plaintext 


a. Before attempting to anagram, the analyst 
must examine the matrix he has constructed, par- 
ticularly the letter values appearing in each row. 


If the anagramming is to be successful and plaintext 
is to appear, each row must exhibit a good vowel- 
consonant ratio. This ratio does not have to be exact; 
the prime requirement is that it be possible. If the 
ratio is unacceptable, the analyst has but one recourse, 
to .change the dimensions of the matrix in order to 
change row letter values. 
b. A check of the individual rows in the mtttrix 


above reveals the following vowel-consonant ratios. 


1 
2 
3 
4 
5 
6 
7 
8 9 10 
UOSIREIITQ 
OOMINSERDF 
U S P E A L L P I S 
TWERMUFBOS 
EHTYARODMD 
QRAEEARUTD 
FRRESBEOZE 
VENROSTEHE 
RRTOEZOOME 
MGRNRONOIW 


Vowels 
6 
3 
3 
3 
3 
4 
4 
4 
5 
3 


Consonants 
4 
7 
7 
7 
7 
6 
6 
6 
5 
7 


These ratios, while not perfect, do not exhibit any 
unusual abnormalities such as rows almost exclu- 
sively composed of vowels or consonants. Further, 
note that the first row composed of 6 vo\vels and 
4 consonants, a reversal of the expected norm, is 
followed by a number of rows where the vowel 
count if slightly lower than normal. This is not an 
unusual condition. Therefore, there being nothing 
to disprove the original assumption as to the di- 
mension of the matrix at this stage, the anagram- 


ruing can be started. 
c. Several factors will aid the analyst in the ana- 
gramming process. Among these are the character- 
istic combinations of certain letters to form digraphs 
and trigraphs, the frequency with which they are 


used, and the types of terminology common to the 
correspondents using the cipher system. These 
factors will form the basis by which the anagram- 


ruing process can be continued. 


(1") In column 10, row 1, a letter Q appears, a 
letter of low frequency usage, but when used in 


English is, almost without exception, followed by a 


U. Scanning row 1 of all adjacent columns revettls 


a U in column 1. By placing these columns side by 
side in the order 10-1 the following digmphs are 
formed: 


10 1 
Row 1 
Q u 
(15) 
2 
F 0 
(40) 


3 
s u 
(11) 
4 
S T 
(63) 
5 
DE 
(42) 


6 
D Q 
(02) 


7 
E F 
(18) 
8 
E V 
(20) 


9 
E R 
(87) 


0 
w 1\11 
(00) 


Comparing the digraphs so formed against those in 
table A-1, Frequency Distribution of Digraphs, the 
frequencies shown in brackets are obtained. All 
with the exception of WM, DQ, and SU are medium 
to high-frequency digraphs, which gives weight to 
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the juxtaposition of these columns. The occurrence 
of WM and DQ in particular may be explained as 
word endings and beginnings. Therefore, these 
columns Ulay be accepted and the anagramming 
process continued. 
(2) The Q appearing in row 6, column 1 can be 
matched to the U in the same :r:ow, column 8 for 
the same reason as the preceding match. Thus the 
columns appear as: 


10 1 
8 
1 
Q U I 
2 
F 0 R 
3 
sup 
4 
S T B 
5 
DED 
6 
D Q U 
7 
E F 0 


8 
EVE 
9 
E R 0 
0 
WMO 


The trigraphs formed by the addition of column 8 
are not unusual. In fact, FOR and EVE are quite 
common, and QUI, SUP, and ERO offer several 
possibilities for good word fragments. The next step 
then is to scan the remaining columns for ·a letter or 
combination of letters of significance. Another low- 
frequency letter is the letter. Z in row 9 column 6. 
It is not oft-en used, though in military communica- 
tions it is used for the word "zero." The trigraph 


ERO above could be combined with the Z to form 
the word ZERO. Accordingly the columns are 
juxtaposed. 
6 10 1 8 
1 
E Q U I 
2 
SF 0 R 
3 
L S UP 


4 
US T B 
5 
RDED 
6 
AD Q U 
7 
BE F 0 


8 
SEVE 


9 
Z E R 0 
0 
OWMO 


(3) At this point, one word (ZERO) plus sev- 
eral other word fragments emerge. SEVE in row 8 
suggests SEVEN; BEFO in row 7 may be BEFORE. 
If these initial word assumptions are valid, we need 
only find a column with the letter R and N in the 
7th and 8th row positions respectively. Checking 
the remaining columns, this combination is found in 
column 3. An R also is found in the 7th position of 


colum-':J. 2, but as an E appears in the 8th position. 
it is rejected. Column 3 is then placed in the matrix 
to the right of column 8. 


6 10 1 
8 
3 
1 
E Q U I S 


2 
SF 0 R M 
3 
L SUP P 


4 
USTBE 


5 
R DE D T 
6 
AD Q U A 
7 
B E F 0 R 
8 
SEVEN 


9 
Z E R 0 T 


0 
OWMOR 


(4) From this point on the solution is quite 
simple. Only five columns remain to be placed, and 
sufficient word fragments appear in the partially 
recovered matrix to affect this easily. For example, 
in row 1 the fragment EQUIS must be preceded by a 
consonant; and there are only two unplaced, the R 
in column 5 and the T in column 9. Column 5 then 
is placed before column 6. 


5 
6 10 1 
8 
3 
1 
REQUIS 


2 
NSFORM 


3 
ALSUPP 


4 
MUSTBE 


5 
ARDEDT 
6 
E A D Q U A 
7 
S B E F 0 R 
8 
OSEVEN 


9 
EZEROT 
0 
ROW1vJOR 


(5) In row 1, the word fragment REQUIS 


suggests the word REQUISITION. A quick glance 
at the remaining values in row 1 of the unplaced 
columns reveals the letters I, T, I. and n. which 


combined with the N in column 5 row 2 completes 
the word. If at this point it could be determined 
which column, 7 or 4, containing the I follows column 
3, the entire matri..'<: could be written out. The word 
BEFORE in row 7 has yet to be completed. but here 
again the same situation is found; an E appears in 
row 7 of both columns 7 and 4. The assumed word 


REQUISITION hints at the subject of the message. 
Considering this, the \\:ord fragment SCPP in row 3 
may possibly be the word SUPPLY, SCPPLIES, 
SUPPLIED, etc., all \vith the letter L follo,,·ing the 
last P. An L appears only in column 7 row 3. so it is 
assumed that column 7 follows column 3. If this is 
the case, the remaining columns must be placed in 
order 9-4-2 to complete the wore! REQU1S!TION, 


the .V appearing at the first position of the second 
row. To confinn this assumption, the entire matri..'<: 


is written out and the plaintext read off horizontally. 
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5 
6 10 1 8 
3 7 9 4 2 
R E Q U I S I T I 0 
NSFORMEDIC 


A L S U P P L I E S 
MUSTBEFORW 
ARDEDTOMYH 
EADQUARTER 


d. As illustrated above, the process of anagram- 
ming results in the recovery of the key used in 
extracting the cipher message from the matrix. Only 


in those situations where the key exhibits charac- 


SBEFOREZER 
.. 
0 s E v E N T H R E 
values themselves or through denvatwn from a 


teristics of being generated by some recoverable 
system, either through a manipulation of the key 


E z E R 0 T 0 M 0 R 
literal key, is this of significance. Usually the recovery 
R 0 W M 0 R N I N G 
of the key is left at this point. 


Section II. ~OLUTION OF INCOMPLETELY FILLED MATRICES 


4-9. ~eneral 
thi• method, the moat critical pha"' ia identifying 
The techniques of solution given previously represent 
the system as such. If the cryptographic 
text 
those which are generally applicable to all columnar 
contains an odd number of letters not equally 
transposition systems. However, where the matrix 
divisible, it is obvious that this system is employed. 
is incompletely filled, a slightly different approach 
Where the text is even or equally divisible, as is 
is required and is somewhat more involved. There 
most often the case considering the norm of padding 
are some instances where special conditions are 
out the message to obtain groups of equal length. 
present, and quick and convenient solutions can 
identification is more difficult and usually comes 
be reached, circumventing some of the more difficult 
only after attempting to solve it as a completely 
process required for a general solution. In the follow- 
filled matrix. If this attempt fails, it is assumed 
ing paragraphs a type of general solution is treated, 
that it is an incompletely filled matrix. But, assuming 
followed by some of the special cases where a 
that the system has been identified, the next problem 
modified technique may be used. In all cases the 
is to determine the dimensions of the matrix. 
basic method is based upon the characteristics of 
b. Wherever an incompletely filled matrix is 
transposition systems dealt with in 
preceding 
suspected, the dimensions are assumed to be the 
paragraphs. 
factors of message letter length, plus a number of 


._./. 
· 
cells not to exceed the width of the matrix, which 
4-1 0. )S4 A Solution for Incompletely filled 
are evenly divisible. 
Matrices 
For example, examine the following cryptogram 
a. When dealing with cryptograms produced by 
which contains 50 letters. 
ATTIT 


CYEGR 
NCUYI 


GTRNT 
ILAIE 


LDHOI OEIIT 
OHMVM 


TLNRE 


OPLSF 


Were it derived from a completely filled matrix, a 
5 x 10 or a 10 x 5 matrix is immediately assumed. 
But as an incompletely filled matrix is suspected, 
several assumptions leading to the dimensions are 
first considered. First, the product of the dimensions 
will exceed 50 cells. Second, nulls, if used to round 
out the groups, will appear in the matrix. Third, 
the cells left blank will not exceed matrix width. 
Given these generalities, the combination of 6 x 9 
or 7 x 8 appears as possible dimensions. Other 


combinations such as 4 x 13, or 5 x 11 are not be be 
rejected completely. Since the former gives a more 
proportional rectangle, it is tried first. In any case, 
the final determination of the correct matrix size, 
unless there is prior knowledge available, is largely 


a matter of trial and error. 
c. Assuming a dimension of 6 x 9, the message 
may now be broken into columns in such a manner 


as to fit the matrix, blank cells included. Thus, in 
a matrix of this dimension, there are t\VO columns 
9 letters long and four columns 8 letters long. If 
the extraction is determined by a key, any specific 
column cannot be given a definite length. General 
parameters can be established based on the limita- 
tions of column length present. Any column can 
only be 8 or 9 letters long. Using this limitation, 
columns of maximum-minimum length are ascer- 


tained by decimating the message at intervals as 


shown in figure 4-4 first by 8's, then by 9's, starting 
at the first letter of the message. Possible columns 
thus generated can be arranged in the vertical 
position, numbered in the order of their extraction. 
The columns above represent the minimum and 
maximum lengths of any column in that particular 
position of the matrix, as determined by its position 
in the message. 
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: T T I\ N C ~ {1 
ojc: III T 
I LA IE 
T L N R~ 


~ 
2 
~ 


~ 
5 
~ 


c ~]§ G R 
G T IR N T 
L_"]J H 0 II 
0 H M v ~~ 0 p Ll s F 


4 
~ 


1 2 3 4 5 6 


Y E E R 0 


A I I C N H 
T I I Y T M 


T L T E L V 


I A T G D M 
T I L R H 0 
N E N G 0 P 


C 0 R T I L 


U E E R 0 S 
Y I C N H F 


Y T l-1 


L V 


M 


Figu,re 4-4 0· Determination of column length (U). 


For example, column 1 being in the first position of 
the message, must start at a known position. Thus, 
it can only be, at the maximum, 9 letters long. The 
second column may begin at the 9th or lOth letter, 
depending upon the length of the first column, and 
thus will contain 10 letters of which only 8 or 9 
represent the true column length. 
d. As these columns represent minimum-maximum 
length, a vertical movement against one another, 
as well as shifting of their relative order, is required 
to aline the rows in their proper sequence. A simple 
way of doing this is to write each column on a 
strip of paper so that it may be slipped or shifted 
as required. The extra letters appearing at the top 
and bottom of the columns can then be struck off, 
or added as required. The surest entry into a system 
is usually by way of some peculiarity of the system 
or the message, an example being the appearance 
of Q's or Z's in the text. There being none in this 
particular message, entry is sought through an 
analysis of digraphs produced by column juxta- 


position. Of the columns extracted, 1 and 6 contain 
the least number of letters. Therefore, since possible 


combinations are limited, either could be used as a 
starting point. Selecting column 6, it is \vritten 


vertically: 
6 


0 


H 
M v 
M 


0 


p 
L s 
F 


(1) Once a column has been selected as a base, 
the next step is to isolate possible adjacent columns. 
The problem consists not only of selecting the right 
column, but also selecting its relative vertical position 
in respect to the base column. In this process, the 
vertical relationship of the letters in any given 
column cannot be disturbed except by moving letters 
from the top of one column to the bottom of the 
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preceding column; or, from the bottom of one column 
to the · 'P of the next succeeding column. The letter 
Y may appear in either columns 1 or 2 in the example 


ab('Ve. If in column 1, it must follow U; if in column 
2, it must precede I. Using the table of digraphic 
frequencies (table A-1), the possible identities of 
letters lying to the right of column 6 are attempted. 
The letters J, K, Q, V, and Z are noted as being 
rarely combined with other letters to form digraphs. 
Thus the V appearing in the columns represents 
either the start of a word, the end of a word, or 
probably a part of one of five common digraphs. If 
it represents the start of a word, it must still be 
part of the digraphs listed. Therefore, using this as 
an initial limitation, those letters which are most 
often combined with the V can be written to the 
right of it, underlining the letters most often used. 


6 


0 


H 
M 


V AEIOT 


M 


0 


p 
L s 
F 


Noting that similar limitations exist in respect to 
combining letters with F and P to form digraphs, 
these letters are also listed: 


6 


0 


H 
M 
v 
A E I 0 T 
- 
- 
M 


0 


p 
A E L 0 P R 
- 
- 
L s 
F 
E F I 0 T 


(2) Using these possible combinations as a 


base, the remaining columns are scanned for these 


letters occurring at the same relative intervals. With 
the exception of the letters forming combinations 
with the letter V, only those high-frequency com- 
binations are selected for letters P and F, leaving 
the low-frequency combinations open. In some cases, 
the low-frequency letters form the correct combina- 
tion. However, it is better to start with the most 
common combinations; then, if no matches are 
found, check the low-frequency combinations. Col- 


umn 1 is set aside immediately as it offers no good 
combinations. Column 2 contains an I, A, and 0 


sequence in the same relative positions. Therefore, 
it is considered. Columns 3 and 5 offer nothing; they 
too, are set aside. Accordingly, columns 6 and 2 are 
juxtaposed. 
6 
2 


0 


H 
M 
y 
(02) 
v 
I 
(12) 
M 
I 
(09) 
0 
L 
(19) 
p 
A 
(14) 
L 
I 
(27) 
s 
E 
(49) 
F 
0 
(40) 


E 
I 


(3) As a check, all digraphs formed by the · 


juxtaposition of the two columns are compared 
with those listed in the table of digraph frequencies, 
and are found acceptable as a group, since none are 
unlikely. If possible word fragments are lacking, 
and if there are no particular letter combinations 
which suggest the next letter to be added to any 
of the digraphs, the next possibility is to attempt 
to expand the digraphs to trigraphs, using tables 
B-1 and B-2 as a guide. As trigraphs, with column 
6 forming the first letter, only FOR or FOU appear 
likely. In the cryptogram, only one U appears. 
Therefore, if FO represents the first two letters of 
the trigraph FOU, only column 1 will fit, forming 
the third letter of the trigraph. Placing column 1 
to the right of columns 6 and 2, the pseudo matrix 
appears. 
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6 2 
1 


0 


H 
MYA 
V I T 
M I 
T 


0 L I 


PAT 


L IN 
ING 
INE 
- 
- 
S E C 


F 0 U 
SECOND 
SECRET 
SECTION 
- 
- 
- 
OUR 
FOUR 
FOUND 
FOUL 


E y 
I 


.(4) Examination of the rows reveals several pos- 
sible word bits-SEC can be expanded to SECOND, 
SECRET, SECTION and FOU to FOUR, FOUND, 
FOUL. Also considering the digraphs formed by col- 
umns 2 and 1, the possible trigraphs ING and INE 


GGGGGGGGG 


0 0 0 R R R T T T 
RNLRNLRNL 


Checking each column in turn for any of the above 
sequences, only column 4 contains a proper sequence, 
that being GTR. Therefore, column 4 is placed next 
to column 1. 


6- 
2 
1 4 


0 


H 
E 
MYAC 
V I T Y 
MITE 


0 L IG 
PAT R 
L IN G 


S E C T 
F 0 U R 
EYN 
I 
T 
L 


(5) There being only two columns unplaced, the 
solution is greatly simplified; the columns must fall 
either in the sequence 3-6-2-1-4-5-3-6 etc., or 
5-6-2-1-4-3-5-6-2-1, etc. Establishing which is the 
correct sequence is done quickly by placing each strip 
in the possible position in which it might appear, 
slipping it up and down against the columns pre- 
viously placed, to look for plaintext. By this method, 
the following sequence would be quickly discovered: 


are suggested. These possible words and trigra phs offer 
a means of placing the next column. If the above 
assumptions are correct, the next adjacent column 
must contain one of the following sequence of letters, 
in the order shown: 


E E E E E.E E E E 


o·o 0 
R R R T T T 
R N L R N L R N L 


3 
6 
2 
1 
4 
5 


0 
R 


0 H 
EN 
EMYACT 
IVITYL 
I M I 
T E. D 


TOLIGH 
TPATRO 


L L 
I N G I 
NSECTO 
RFOURH 


E 
E Y N ~M 
c 
I 
TV 
y 
L A1 


(6) By rearranging columnar order, not changing 
the sequence, using column 4 as the starting point, 
and by striking off the letters duplicated at the top 
and bottom which were generated in establishing 
minimum-maximum column lengths, the matrix is 
reconstructed and thus completes the solution. 
4 
5 
3 
6 
2 
1 


ENE1\1YA. 
CTIVIT 
YL I11fi T 
E D T 0 L I 


GHTPA.T 


R 0 L L I N 
G I N S E C 


TORFOU 
RHXXXX 
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4-11. (C) A Solution Using Literal Character· 


istics 
a. On occasion a cryptographic text will exhibit 
an outgrowth of the language used, which will enable 
the analyst to reach a rapid solution by a less involved 
process. In the English language for example, the 
use of the letters X, Q, K, J, and Z is-rather limited. 
Moreover, the use of any of these letters immediately 
suggests words common to the military. 


K 
Kilo 
Kilometer Kill KIA 
Q 
QU as in Request 
Requisition Quota 
J 
Juliett, June, July, Junction, Join 


X 
Xray, Six, 
Fix, 
Axis 
Z 
Zulu Zero 


Depending on the service and function of the corre- 
spondents, other words of limited use could be found. 
Similar limitations and associated words are found 
in all alphabetic languages and give a rather quick 
entry into a system. 
b. Taking one such characteristic, the analyst can 
move directly into the anagramming stage with 
reasonable certainty that as the recovery of the 
plaintext progresses, the matrix and its keys will 
fall out. 


VAAEI 


YNTRT 
REEEA 


ZSD I I 
WN I LN 
XWEZE 


TZZMO 
OORTS 
RFAXI 


IOERE 
RORUF 


LERRA 


HNEUE 
PLORO 
OUTER 
QOOSJ 
HTUSF 


DE 


APDEF 


ARRON 
OTSEK 
EOLSO 
TIFTS 


TOXIL 
ECTZL 
JVPPE 
SYEIO 
svuoc 


Examination of the above text reveals a number of 
low-frequency letters which may be used as an entry 
into the system. To begin, a frequency distribution 
is made, see figure 4-5. 


- 
- 


~ 
~ = - 
= 
~ 
- 
- 
~ 
$.-~ 
~ ==~~ =~=-~-~~--~~~~====~ 
A B C D E F G H I J K L M N 0 P Q R S T ~ V W X Y Z 
7 0 2 3 1 5 0 2 9 2 1 6 1 5 1 4 1 1 9 1 5 3 2 3 2 5 
9 
7 
3 
1 


Figure 4-5 (U). Trampoaition ciphertext, uniliteral frequency dutribution (U). 


(1) Any low-frequency letter may be used, 
but since the Q appears only once, it will be used. 
With the Q as a. center point, a. sequence of letters 
is withdrawn from the message, the exact number 
of letters depending upon a. presumed approximate 
size for the matrix. The message contains a total of 
137 letters indicating that its dimensions possibly 
lie in the general area. of 10 x 14 to 12 x 12. This is 
just a. guess serving only to place some limitation 
on the number of letters extracted, a.nd to some 
degree to duplicate the determination of minimum- 
maximum column length by decimation. On this 
basis 13 letters are extracted, 6 preceding and 6 
following the letter Q, and inscribed vertically to 
form a column. 
I 
I 


0 


E 


R 
E 
Q 


0 
0 s 
J 
E 


0 


Since there are five U's in the cryptogram, five 
additional columns (each centered about a U, and 
of equal length) are now \vithdrawn from the message 


and compared individually against column 1. De- 
termination of which column should be paired with 
column 1 depends on which pair produces the most 
acceptable digraphs. In this particular case, addi- 
tional comparative basis is provided by the J which 
also appears in column 1. 
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(1) 
(2) 
(3) 
(4) 
(5) 
I Z (02) I R (27) I I (00) I 0 (41) I I (00) 


I M (09) I F (10) I L (28) I R (27) I F (10) 
0 0 (06) 0 A (07) 0 N (77) 0 U (37) 0 T (19) 
E H (07) EX (07) E R (87) E F (17) E S (54) 
RN (07) R I (30) R 0 (28) RH (30) R S (31) 
E E (42) E 0 (12) E R (87) E T (37) E V (20) 


Q u- (15) Q u (15) Q u (15) Q u (15) Q u (15) 


0 E (03) 0 T (19) 0 F (25) 0 S (14) 0 0 (06) 
0 A (07) 0 E (03) 0 H (03) 0 F (25) 0 C (08) 
S P (10) S R (05) S T (03) S T (02) S X (00) 


J D (00) J 0 (02) J U (02) J I (00) J W (00) 


E E (42) E T (37) E S (54) E F (18) E E (42) 


0 F (03) 0 S (14) 0 F (25) 0 T (19) 0 Z (00) 


Initially combinations (1) and (5) can be rejected, 
as the digraphs produced by the juxtaposition of the 
columns produce impossibly low-frequency digraphs 
(frequency shown in parentheses). Combinations 
(2) and (4) contain a fair number of medium-fre- 
quency digraphs. Combination (4) also has the 
digraph JI with a frequency of zero. Combination 
(3) has several high-frequency digraphs, in addition 
to a number of medium-frequency digraphs. It also 
has one with zero frequency, but since it occurs at 
the top of the column it may not be a true match, 
not occurring in adjacent rows at all. Of all the 


combinations (3) offers the best possibilities, and it 
will be used as a b~ for further analysis. 


1 
2 
3 
4 
5 
6 
7 
8 
9 


10 


11 
12 
13 


1 
2 
3 
4 
5 
6 
Z 0 I E I P 


L L L L L L 
RSNEYO 
EORRNR 
ESORTO 
EYRARA 
AEUDTR 


R I F E 0 R 


FOHVOO 
AWTARN 
XNUATE 


I 
I S E S C 
OLFIPT 


(2) Assuming that the selected combination is 


the· correct arrange~ent, the digraphs can be con- 
sidered for possible expansion. ·For example, the 
digraph IL can be expanded to HILL or WILL, 


QU can be expanded to QUE, or QUI, and JU to 


JUN or JUL, all fairly common trigraphs. A column 
to complete these trigraphs must contain one of 
the following combinations of letters in rows as 
shown below: 


Of these possible columns, only the second sequence 
will complete the assumed trigraphs. Therefore, it is 
placed to the right of the two columns previously 
placed, which in turn forms a basis for additional 
anagramming. The placement of the columns, and 
possible expansions are shown below: 


1 
I I 
2 
IL 
L L L L 
3 
ON 


4 ER 
5 RO 


6 ER 
7 
QU 
E E I I 
8 
OF 


9 
OH 
10 ST 


11 
JU NLNL 
12 ES 


13 
OF 


By starting with the letter which precedes each of 
the .six L's found in the text, the following columns 
are pulled out quickly. 


I 
I 0 


(H(W) 
I L L 


0 N S 


(Z) 
E R 0 


R 0 S 


E R Y 
(RE) 
Q U E 
(ST) 


0 F I 


0 H 0 
STW 
(0) 
JUN 
(E/C/) 
E S I 


0 F L 


(3) Once an entry has been made into a trans- 
position system, the complete solution follows 
rapidly, and in most instances it is merely a mechan- 
ical process of making assumptions and then testing 
their validity by using appropriate frequency tables. 
Further progress is then made by expanding upon 


~..-.... .... -.... ----·-. 
4-11 
\;U 111 r I Ut:.N I IAL 


-~ 


word fragments. Following this technique the col- 


umns shown below could be matched witli little 
trouble. 
X I 
I 0 F 
EWILLT 


C' E 0 N S 
I 
TZEROF 


Z E R 0 S T 
LLERYS 
REQUEST 
E R 0 F I V E 


EROHOUR 
EASTWO 
ADJUNCTION 
REESIX 


0 F L W 
E 


(4) In addition to. the many obvious words and 
word fragments in the matrix above, evidence also 
indicates the dimensions of the matrix. Considering 
the letters in the top row, they can hardly be part of 
a word in their present sequence, and they are 
repeats of letters appearing in the bottom row. 
Therefore, true column length may start in either 
the first or the second row (in the first row if the 
repeated letter is located there, or in the second row 
if the repeated letter falls in the bottom row). 
Consider also the letter E which ends the column 
starting XWE, and which appears as the last letter 


of the cryptogram. As it ends the cryptogram, it 


must be- the last letter of the column in question. 
Note also that the W which ends the last column of 
the matrix is also the same W that appears in the 
start XWE. Therefore, it must belong to this column 
and not to the last column of the matrix, the X then 
ending this column. On this basis, there are two 
column lengths; one of 11 starting with Wand ending 
withE; the other starting with F and ending with X. 
Thus the F which ends column IL.VR must be 
deleted. The columns ending W.VIL and that 
beginning ILNR share in common the letters I and 
L. This is impossible. If short and long columns are 
11 and 12 letters or rows in length, neither column 
can contain both letters, as they would thtm be 13 
letters long. Therefore, they must be shared bnt,,·een 


the two, and to preserve the sequence of letters one 
must end WSI, and the other start LNR. 
(5) Since the cryptogram contains 137 lettt1rs. 


the assumption of long columns of 12 letters nnd 


short columns of 11 letters is very good. For example. 


12X12=144, 144-137=7, and 12-7=5; therefore. 
in a matrix with 12 rows and columns in which 137 
letters have been inscribed, there will be 5 long 
columns and 7 short. This can be confirmed by going 
back to the cryptogram and marking off those 
sequences used. Also, knowing the length of some 
columns will serve to isolate additional columns of 
the correct lengths, speeding the recovery process. 
VAAEI TZZMO HNEUE APDEF TOXIL 


Y ll T R T 
0 0 R T S 
P L 0 R 0 
A R R 0 N E C T S L 
REEEA RFAXI OUTER OTSEK JVPPE 
ZSDII IOERE QOOSJ EOLSO SYEIO 


WNILN RORUP HTUSF TIFTS SVUOC 


XWEZE LERRA DE 


Figure 4-6 ~Isolation of columns in ciphertext (U). 


Counting the number of unused letters lying between 
those columns previously extracted, as underlined 
in figure 4-6, the follo,ving combination of column 
lengths can be established. 
First, unused sequence of 45 letters=one 12-row 
column and three 11-row columns. 
Second, unused sequence of 24letters=two 12-row 
columns. 
Third, unused sequence of one letter must be 
assigned to either the preceding or following column. 
Since it is unlikely that the ·preceding columns 
could start with IIOE, the 0 belongs to the following 
column making it 12 letters in length. 
(6) The assumption as to column length seems 
valid, but still there are only six identified as to 
length, three short and three long. An additional bit 


4-12 


of information, which will aid in further l'l't'nnry 


is that long columns appear on thP left nnd ,.;hort 


on the right. Accordingly the columns can hi' Illtl\'l'd. 


long columns to the left and short column,; r" the 


extreme right to maintain word symmetry 
0 F------EW I L 
L T - - - - - - C' E 0 .V 
SI------TZER 
OF------ZERO 
S T------L L E R 
YS------REQC 


E 8------E R 0 F 
I V------E R 0 H 


0 U------EA S T 
W 0------A D J U 
NC------R E E S 


I X 


P-AN -=-• ni='NTI A L 


(7) Having established the parameters of the 


matrL'C, and having placed the columns in their 
correct sequence, recovery of the remaining columns 
becomes quite easy, using the same methods pre- 
viously covered. In this case the many word fragments 


are readily apparent and measurably aid in the 
process. The completed matrix appears as follows, 
the keys being derived by the order in which the 
columns are extracted from the matrix. 


1 
1 
1 
9 
1 
6 
7 
2 4 3. 1 5 
2 
8 
0 
0 
F F E N s I V E WI L 
L T A K E P L A C E 0 
N 
s I X J ULYATZER 
0 F 
I V E 0 N E Z E R 0 
s T 0 
P A R T I L L E R 
y s u p P 0 R T R E Q u 
E s T E D A T Z E R 0 
F 
I v E z E R 0 Z E R 0 H 


0 U R s F R 0 NI E A s T 
W 0 0 D T 0 R 0 A D J u 
N C T I 0!'N T H R E E s 
I X S I X 


4-12. ~ 
Stereotypes and Service Terminology 


a. A haracteristic of military cryptograms, par- 
ticularly at the lower echelons, is the presence of 
stereotypes and characteristic terminology common 
to military operations. These elements may occur at 


any position in a message although those at the 
beginning and the ending are more readily identifi- 
able. These elements may be any of the following 
types: 


5 1 2 3 4 
R E QUE 
STINF 
0 R M A T 
I 0 N C 0 


NCERN 
INGEN 


EM Y A C 
TIVIT 


y 


(1) Phonetic alphabets. 
(2) Ranks, titles, unit designations, and nick- 
names. 
(3) Map reference data, grid coordinates, refer- 
ence lines, hill numbers, geographic place-names, etc. 
( 4) Weapons, caliber, short titles, model num- 
bers, etc. 
(5) The 24-hour time system when spelled out. 
(6) Addressee and signature lines. 
(7) Message reference components (such as part 
one of two parts, reference your message, etc.). 
b. These elements may be either spelled out or 
abbreviated. The above list is not all inclusive. Once 


the use of specific stereotypes and certain service 
terminology has been identified, the analyst is 
provided with an invaluable aid in the solution of 
cryptograms, particularly in the case of transposition 
systems. Not only is this of importance in ana- 
gramming, but also, in certain instances, the use of 
stereotypes can lead to the rapid solution of a num- 
ber of messages simultaneously. 


4-13. ~ 
Special Solutions 


a. On occasion, depending on the security conscious- 
ness of the correspondents, a series of messages are 
enciphered in a transposition system of the same 
width. If this is coupled \vith stereotyped beginnings 
or endings, regardless of whether or not different 
keys are used, the resulting ciphertext will exhibit 
a number of similarities which the analyst ·can. 
quickly exploit. As an example of how these simi- 


larities are produced, observe the encipherment 
shown in figure 4-7. 


2 4 1 5 3 
R E Q U E 
S TIN F 


0 R MAT 


I 0 N 0 N 
L 0 C A T 
I 0 N 0 F 


COMMA 
:. u p 0 s 


y 


!1essage A 


ETROC 
NMIQI 
MNEGY 
VUNAC 
REAlE 
FTONN 
CTRSO 
INIET 
y 
A 
B 
c 
D 
E 


Message B 


QIMNC 
NMPRS 
OILIC 
NTEFT 
!ITFAS 
ETROO 
OODUN 
AOAOM 
0 


B 
E 
D 
A 
c 


Figure 4-7 iJ!{'Repeated sequences, cipher message A and B (U). 
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The repeated sequences that appear in both messages, 
underlined above, are the result of two factors: stereo- 
typed beginnings and matrices of the same width. 
Given these two factors, repetition in text will occur 
as a result of the enciphering process. Additionally, 
the number of repetitions is determined by the 
number of columns. The length of the repetition is 
determined by the number of rows ~ccupied by the 


stereotype. The sequence in which the repetitions 
occur in the message are the result of the order of 
extracting the cryptographic text from the matrix, 
i.e. the particular key used. Thus, matrix width 
(number of columns), depth (number of rows), and 
order of extraction (key sequence) can be found. For 
example, consider figure 4-8. 


Message A 


ASOLI 
LBOAE 
WDLIR 
ACIEL 
NSAIR 
IEDLS 
NDWND 
TQNIH 
UAOTL 
FMLIF 
- 
2 
4 
1 
3 
5 


AJ.1PES 
DB REV 
SCEPV 
NELOM 
YEO DC SHCAI TIELT 
N!!AEE 
IDERA 
- 
6 
., 
7 


Message B 


QNILB 
TSROI RRIEP 
l-IHUE 
OZYAS 
OLSUT 
ARZEO 
LTMUI 
MTQBR 
OAUSC 


1 
2 
3 
4 
5 
IEEHT RXOLI 
RSWBO 
DSERD 
EODPL 
TIAFS 
EIFAE 
SDEEE 
ZT 
r 
T 
T 


Figure 4-8 /. Stereotypes a8 repeated sequences ( U). 


(1) -Each cryptogram. contains 8 sequences which 
are repeated in the other. Therefore, 8 columns can be 
assumed, each repetition marking the beginning of a 
column. 
(2) Message A contains 95letters; as 8X 12=96, 
we assume a matrix depth of 12 rows containing 
seven columns of 12 letters and one column of 11 
letters, the column beginning with IF A. Being the 
shortest column, it must appear at the right of the 
matrix. 
(3) Message B contains 92letters; as 8X 12=96, 
we assume again a depth of 12 rows, four columns of 
12 letters, and four columns of 11 letters. 
( 4) All repeated sequences, with the exception 
of ASOL are of the same length. As the longer columns 
of an incompletely filled rectangle occur on the left, 
the column beginning with ASOL is placed to the left. 
(5) As the repeats do not appear sequential in 
both messages, a different key has been used in each 
case. 
(6) The keys, which determine the order of 
extraction of the column from the matrix, are reflected 
by the order of the repeats in each message. 
(7) Row sequence, i.e. the order of the letters 
across the matrix, are similar in both matrices for the 


stereotype; therefore, a column placement of 1 in 
one matrix can be applied to that column -exhibiting 
the same repeat in the other matrix. 
b. With these generalities, two matrices can be 
constructed as follows, one for each message: 


A A-----I 
S 
F 


0 
A 
L 
M 
I 
p 
L 
E 
B 
D 


0 
D 
A 
B 
E 
R 
W 
E 
D----- 


B A-----1 
S 
F 


0 
A 
L 
E 
s 
s 


U 
D 
T 
E 
A 
E 
R 
E 
z 
z 
E 
---T 
0-- 


With the parameters of the matrices established, 
anagramming can be commenced playing the re- 
covery of one column's placement against the 
placement of columns in the other matrix. The two 
columns of each message that start with a Q and 


U respectively can be withdrawn and paired: 
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A 
Q u 


NS 


I C 


HE 


UP 


A V 


0 N 
TE 
L L 
F 0 


MM 
L y 


B 
Q u 


NS 


I C 


L I 
BE 
TE 


SH 


R T 


0 R 
I X 
R 0 


The digraphs formed by pairing the columns appear 
valid, and can be placed in the matrices. Examina- 
tion of matrix B shows only 3 columns of 11 letters 
remaining. Therefore, the pair above for matrix B 
must fit in two of those three spaces. Also, message 
B contains only 1 remaining column of 11 letters, 
that beginning with the repeated sequence EOD, 


which means that these three columns must be 
joined. Considering the letters available, the se- 
quence EQUI appears to be better than the sequence 


QUE!. As the first row, therefore, it is placed in 
matrix B. Since the column placement found for 


A 
12837465 
ALLREQUI 


S I T I 0 N S F 
ORMEDICA 


LANDCHEM 
ICALSUPP 
LIESHAVE 
BEENOONS 
OLIDATED 
ANDWILLB 
ESENTFOR 


WARDIMME 
DIATELY 


d. The methods of solving cryptograms enciphered 
by matrices of the same width, but where the stereo- 
types occur in the endings of the messages, are the 
same as those given above. The only difference is 
that since the repetitions occur in the last few rows 
of the matrices, the analyst deals with column endings 
rather than the beginnings of each column. All other 
conditions being equal, the analyst need only ana- 
gram using the bottom row rather than the top using 
essentially the same techniques as given for message 
beginnings. 


one matrix can be applied to the other, the same 
columns that start with the same repeated letters 
are also placed in matrix A, producing the following 
matrices. At this time, key values are also assigned 
to each matrix in the order of its column's appear- 
ance in the message. 


A 
B 
1 - - - 
7 
4 
6 
5 
---- 7 
1 
5 
8 
A 
E Q U I 
A 
E Q U I 
s 
0 NSF 
s 
0 NSF 
0 
D I C A 
0 
D I 
0 A 
L 
CHE11,1 
L 
p L 
I E 
I 
s UPP 
s 
L B E S 


L 
HAVE 
u 
T TED 
B 
C 0 N S 
T 
I SHE· 
0 
A T E_D 
A 
A R T E 
A 
I L L B 
R 
F 0 R E 
E 
T F 0 R 
z 
s I X Z 
w 
111,1ME 
E 
E R 0 
T 
D 
E L y 
0 


c. Using familiar anagramnung techniques to 
place one column in one matrix, and then transfer- 
ring its location to the other matrix, both messages 
can readily be solved, resulting in the recovery of 
the following matrices: 


B 
3 
6 
4 
2 
7 
1 5 
8 
ALLREQUI 
S 
I T I 0 N S F 
ORMEDIOA 
LSUPPLIE 
SWILLBES 
UBMITTED 
TOTHISHE 
ADQUARTE 
RSBEFORE 
ZEROSIXZ 
EROZEROT 
0 DAY 


4-14. {ri Solution of Messages of Identical 
/'Length 


a. When several messages of identical length have 
been enciphered using the same key, implying an 
equal width matrix, a solution can be obtained with- 
out recourse to stereotypes or literal patterns by 
using a process known as multiple anagramming. In 
this process, the anagramming is applied across 


several messages, rather than attempting to recover 
the individual columns of each message. This process 
is predicated on the premise that the letters of two 
or more messages which occur in the same relative 
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position in a given matrix will undergo exactly the 
same change in position. 
b. Also used in this process are the characteristics 
of a progressive key. A progressive key is a series of 
numbers which correspond to tho sequence in which 
letters can be extracted from a transposition cipher 
in order to read plaintext. The key may be divided 
into sections or sequences of numbers, each corre- 
sponding to a row of the matrix used to produce the 
cinher, and each bearing a definite relationship to 
other sequences. This relationship is exhibited by a 
one-digit difference between the numeric values of 
each sequence; the difference being minus for a 
preceding sequence and plus for a succeeding se- 
quence. Figure 4-9 illustrates this concept. The 
matrix contains both numbers and letters, the former 
corresponding to the sequence of extraction, and the 
latter to the plaintext. 


1 
4 
2 
5 
3 
6 


A 
R 
T 
I 
L 
L 
1 
15 
6 
20 
11 
24 


E 
R 
y 
F 
I 
Rl 


2 
16 
7 
21 
12 


I 
25 
1 


E 
H 
E 
A 
v 
y 
3 
17 
8 
22 
13 
26 


I 
N 
z 
0 
N 
E 
4 18 
9 
23 
14 
27 


0 
N 
E 
5 
19 
10 


Pigure 4-9 rf. Row sequences in a progressive key ( U). 


c. The cipher text extracted in normal key sequence will appear as: 


AEE/0 TYEZE LIVNR RHNNI FAOLR YE 


To reflect the sequence caused by the extraction 
process, the analyst could assign numerical values 
to each letter of the message in its order of appearance: 


AEEIOTYEZELIVNRRHNNIFAOLRYE 
1 2 3 4 5 6 7 8 9 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 


0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 


Plaintext could be read from this sequence of letters 
by using the progressive key: 


1-15-6-20-11-24-2-16-7-21-12-25 
3-17-8-22-13-26-4-18-9-23-14-27 


5-19-10 


Note that the progressive key is only a repeat of 
row sequences, each section of the key corresponding 
to a row of the matrix. The origin of the progressive 
key lies in the horizontal inscription of plaintext 
followed by the vertical transcription to form 
ciphertext. 
d. The relationship of each sequence of the 
progressive key is such that if the two letters repre- 
sented by key values 15-6 could be anagrammed in 
one sequence, one could logically assume the juxta- 
position of 16-7 and 17-8. Although a valuable tool, 


1 2 3 4 
5 6 7 8 9 1 
1 
1 1 1 


0 1 2 3 4 
1 
5 


this process does have some limitations. By con- 
tinued generation of possible juxtaposition, one 
could lap over into another sequence of the pro- 
gressive key. For example, a continued expansion of 
the key values 15-6 \vould soon produce the juxta- 
position of values 20-11; but note that 20-11 


appears in the first sequence. In this case it just 
happens that they, too, are juxtaposed, but quite 
often they are not associated in any manner. There- 
fore, juxtaposition by expansion is not always 


infallible. As anagramming progresses, changes are 
sometimes required. Within limits, anagrumming is 
very useful. 
e. Using this technique, the initial step in the 
solution of a number of messages is to superimpose 
the messages and assign to each column so formed, 


a number in the normal sequence, us follows: 


1 1 
1 
1 2 2 2 2 2 2 
6 7 8 9 
0 
1 2 3 4 5 
LPQRYTTLPUARRSIUEDEOETSRE 
~1essage A 
QSNETBBUHBHRSMDREDAAOAEEE 
~Iessage B 
AOEEWOVGUCMTNISFRDERESOTE ·Message C 
IOOOEODNRNNNPOHTTYGETTWRA 
~Iessage D 
JNUOTEKUFRRCVADOONNITAIFA 
~Iessage E 
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Anagramming is started using any element of any 
row, each representing a message; and since each is 
inherently similar in respect to the movement of the 
individual letters, the process is applied to all other 
letters in the same column. Conseque!1tly, selecting 
the Q and U columns, 1 and 8 of message B, as point 
of departure, they may be juxtaposed and expanded 
as follows, carrying along all other elements of 
columns: 


1-8 
2-9 
3-10 
4-11 
5-12 
L L 
p p 
Q u 
R A 
y R 


Q u 
S H 
NB 
EH 
T R 
A G 
0 u 
E C 
EM WT 
I N 
0 R 
0 N 
0 N 
EN 
J u 
NF 
UR 
0 R 
T C 


(1) 
(2) 
(3) 


Although the above anagrams give two doublets 
(LL and PP), generally they are acceptable and the 
process may be continued. It is at this ,;tage that the 
relationship between segments of a progressive key 
come into play, for any column selected for a given 
pair should produce, by adding or ,;ubtracting one 
to its number, a column that can be anagrammed to 
the other columns. Thus, column 17 is juxtaposed to 
columns 1-8, columns 18, 19, 20, and 21 could be 
anagrammed with the pairs 2-9, 3-10, 4-11, and 


5-12. The following diagram, illustrating the fore- 


going expansion of one sequence of a progress key, 
shows how it may serve as a check on the analyst's 
assumption. 


(4) 
(5) 
1-8-17 
2- 9-18 
3- 10-19 
4-11-20 
5- 12-21 


L L E 
p p D 
Q U E 
R A 0 
Y R E 
Q U E 
S H D 
NBA 
FHA 
T R .0 


A G R 
0 U D 
E C E 
EM.R 
WTE 
IN T 
0 R Y 
0 N G 
0 N E 
EN T 
J u 0 
NFN URN 
0 R I 
T C T 


f. Further study of the message reveals that col- 
umn 19 could be anagrammed to columns 1-8; to 
check this assumption and to generate additional 


anagrams, all segments of the key nrl' C'Xpnnded nnd 
juxta posed: 


(1) 
(2) 
(3) 
(4) 
(5) 
1- 8 -'!9 
2- 9 -20 
3- 1Q-21 
4-11-22 
5- 12-23 
Y R S 
TRE 
WTO 
ENW 
T C I 


L L E 
p p 0 
Q U E 
R A T 
Q U A 
SHA 
N B 0 
FHA 
AGE 
0 U R 
E C E 
EMS 


I N G 
0 R E 
0 N T 
0 N T 


JUN 
N F I 
U R T 
0 R A 


The trigraphs generated by the juxtaposition of the 
columns above appear to be valid, except those of 
the last segment, particularly the trigraphs YRS 


and TCI. For the moment, rather than rejecting 
them, it would be best to ·work with those showing 
the better combinations, in this case segments 1, 
2, and 3. Note that QUin the first and third segments 
are now followed by an A and E respectively which 
are likely combinations. If they are valid, then 
because of the relationship between sequences, 
segment 2 must also be valid. Scanning all remaining 
columns in the message, including those just rejected, 
column 12 seems a likely candidate for matching 
to the sequence 1-8-19. Inscribing those columns 
the following combination is found: 


1-8-19-12 
L L E R 
Q U A R 


A G E T 
IN G N 
J u N r 


By placing columns 13 and 14 to thP second and third 
sequences, the following combinations an' derin•d: 


2-9-20-13 
P P 0 R 


S HAS 
OURN 
0 REP 


N F I V 


3- 10-21-14 


Q U E S 


N B 0 JI 


E (' E I 


0 .V T 0 
U R T .1 


As several word fragments are no\\. quite plnin 


(artillery, requested, headquarters, received, five), 
the recovery of all the plaintext can be affected 


easily, still generating additional portions of each 
sequence on the basis of anagramming a single 
column to one sequence. When completed, the 
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messages and accompanying progressive key would 
appear as: 


1 
2 1 
1 1 
2 1 
2 1 
2 1 
1 2 1 
2 1 
1 4 2 5 1 8 9 2 5 3 6 2 9 0 3 6 4 7 3 0 1 4 7 5 8 
A R T I L L E R Y S U P P 0 R T R E Q U E S T E D 
HEADQUARTERSHASBEENBOMBED 
MESSAGETWOFOURNOTRECEIVED 
NOTHINGNEWTOREPORTONTODAY 
ROADJUNCTIONFIVEFOURTAKEN 


g. Nothing now remains to be done except to 
recover the numeric key used in extracting the 
columns from the matrix. Since the progressive 
keys reflect columnar and row order, they are used 
for this purpose. By setting them down to show their 
row and columnar sequence, the following matrix 
and keys can be recovered, see figure 4-10. 


11 
4 
22 
15 
12 
5 
23 
16 
13 
6 
24 
17 
14 
7 
25 
18 


1 
8 19 
2 
9 
20 


3 
10 
21 


4 2 
7 
5 
1 
3 
6 
11 
4 
22 
15 
1 
8 
19 
12 
5 
23 
16 
2 
9 
20 


13 
6 
24 
17 
3 
10 
21 
14 
7 
25 
18 


j 


Figur 
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CHAPTER 6 (C) 


GRILLE TRANSPOSITION SYSTEMS 


L,\ 
Section I. (C) GENERAL 


6-1 . (C) Cryptographic Grilles 


a. Grille systems are basically tmnsposition sys- 


tems which in\'OlYe the USA of t1ro ell'ments, a thin 
material in \\·hich perforations have been made 


according to a definite pattern, and <l matrix, usually 
of ruled paper, of the same dimensions as the grilles. 
The grille placed over the matrix sen·es to unconr 


its cells in a systematic order, thus pro\·iding space 


for the insertion or extraction of letters. groups of 
letters, or entire words of the plaintext, thereby 


ext. 


a. These consist usually of a square in "·hich 
perforations haYe been cut in prearranged positions. 
·when the grill is snperimposed upon the matrix. 


the apertures disclose cells of the matrix. There arc 


eight possible positions in 1rhich the grilles may be 
placed upon the matrix as shO\\·n in figure 6-1. 


~ 
N~ 


t 


L 


1-- 


.!>I 


ROTATE THRU FOUR POSITIO:-IS ( 1-4) 


.0 ~ 


5 
f- 


C> 


J. 


l 


REVERSE AND ROTATE THRU 


FOUR POSITIONS (5-8) 


Figure 6-1 cp). Simple cryptographic grille (U). 


grille is then remo\-ed and a ciphertext produced 


by transcribing thtl letters, again following any 
prearranged route. 


b. If the number of letters of the pbintext exceed 


tho capacity of the grille, the process is coutinuecl 


on a fresh matrix, this time the grille being placed 


on tho matrix at its next positiun. Thns by repe:1tedly 


using fresh matrices and progressinly re[J<lsitioning 


the grille, the entire message is t>ncryprecl. The 
several sections of the cipher letter, resulting from 
each grille placement on snccussi\-e matrices, nwrel.v 


follo\\- one another in tlw final cryptogmm. In rhi..; 


manner it is only 1~ecessar_y for the correspondents 
tu agree upon tho initial posilion of tho grille ;md 


irs suceessi\-o po;;itions or pbccrncnt. Tho ex<lmpk 


in figure G-2 depicts a mnthod of using thc- simple 
. grille to encipher a message. 


?~a.i:l tex:. "::essa.,::e. 


E:;L:.;-,: :'.'...:;:\: ::;..;::".:'AL:::; C3SE?Vl::D ~!OV::;G 30l:::i 
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·:-o 
~::::;::: ~c:A:. 
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I 
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I 
I I ! 
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101 1 1 
1N1 1 nrr·~, ;1111 
fi :MI 
IIJT31Si Ttl I I I I 
I I A l 
i ! 
~0' 
I 
I TYI 
! I I ! I 
-rTr··~, -, JTTT r: r; T ~-!NT 1 
iTi 
: !l!;NI I I 


--~1 I I IRT 1Vr-fti I I !Gi IRl 
I I 
I 
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I : o 1 L 1 
1 ' v 1 ! 1 r-;- 1 ; -Ill' 
1 , 
I 
i i ll!l I I IIi I 


i ! ill I I i I I Ill : 
i 
I IT I 
i 
I IiI I 
1-1-1 
I I I IiI 11 


i I I I 5 
I 
I i i 
I 
I 
' I IT 
IV 
I 
: I 6 i I I I 
! 
T' I 
10 If 
18 
i I iUI I I : 


I IE· 
I ' 10 
II 
li 
Rl I ! I II I 1 


i I INI 
1:! 
I 
I liM 
I 101 !tiii:IH 


F 
IR 
101 
I 
18 
I I I I I I 
I 
11 
E._ 
lR 
Ill 
lUI I 
I 
L .M 
V LJG 
l!i 
I 
I 
I 
II 
Nl I 
I 
I 
I 
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I 
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I 
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Encr:rpted '!'ex"t. 
In encryptino· a message the o-rille is placed upon 


• 
• ~ 
' 
, 
0 
• 
• 
• 
T.iiAYK :hEEA :JT:-.tLB OOOBD SIIRN EVVNE T!lGS;. 
the matriX lll one of the eight pOSSible pOtHtiOllS. 
LRUGO .'WUOO PIEPJ-t :!OI:"I ZiiiOC 'rOS1'F IBIEI 


The letters of the plaintext then arc inscribed in the 
a;:Y.o.c o.:Aoo ~cr::.R 


open cells, following any prearranged routo. The 
Figure 6-2 cci- Use of simple cryptographic grnle (U) . 
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PART THREE cp{ 


MONOGRAPHIC SUBSTITUTION SYSTEMS 


CHAPTER 7 1-> 


UNILITERAL MONOALPHABETIC SUBSTITUTION SYSTEMS USING STANDARD 


CIPHER ALPHABETS 


7-1 . ;c) General 


Section I. <rjJ BASIS OF SUBSTITUTION SYSTEMS 


a. The methods of cryptography to be covered in 
this part differ from those previously presented in 
which the plaintext elements are transposed, but 
always retain their identity. In substitution systems 
the elements or textual units composing the original 
plaintext retain their relative position, one to the 
other, but not their identities. Cipher elements 
replace, or are substituted for plaintext and for this 
reason, these systems are called substitution. They 
may deal with individual letters, combination& of 
letters, or even words and sentences. When the 
cryptographic process deals with single letters, or 
combinations less than words and sentences, the 
system is termed a substitution cipher system. 
When the process involves primarily the treatment 
of whole words, phrases, and sentences, the system 
is known as a code system. 
b. The differentiation of systems, basically similar 
in that a cryptogram is produced by substituting 
one valu.e for another, may seem somewhat arbitrary. 
However, the difference in the length of the elements 
directly affects the manipulation process of cryptog- 
raphy. Generally, the smaller the element, the 
better it lends itself to complex manipulation. 
Substitution systems are also further classified by 
the number of alphabets involved, and by the 
number of elements used and manipulated from 
each alphabet. A detailed definition of common 
substitution systems is found in paragraph l-12a. 
c. A fundamental characteristic of monoalphabetic 
substitution, the first substitution system to be 
considered, is that each individual plaintext unit, 
one character or a number of characters, is always 
represented by the same cipher unit, again one or a 
number of characters. This rigid rule is one of the 
inherent weaknesses of this class of system, for 


cipher units must inevitably occur \vith the fre- 
quency of use of the plaintext equivalents, and 
analysis of the system is thereby greatly simplified. 


7-2. (U) Nature of Alphabets 


a. In the study of cryptanalytics, the dual nature 
of the alphabet becomes apparent. In order to write 
a polysyllabic language with facility, it is necessary 
to establish and maintain, by common agreement 
or convention, a national equivalency between two 
sets of elements, a set of. elementary sounds, and a 
set of elementary symbols to represent the sounds. 
Theoretically, in an ideal alphabet, each symbol or 
letter denotes only one elementary sound, and each 


elementary sound is invariably represented by the 
same symbol. 
b. The English language is written by means of 
26 simple symbols or letters which, taken together 
and considered in a sequence, constitute the alphabet 
of the language. The Dutch and German alphapets 


are similar in length, French has 25 characters, 
Italian has 27, and Russian has 31. Not all systems 
of writing are of this nature. Chinese writing is 
composed of about 44,000 complex characters, each 
representing one sense of a word. Japanese writing 
has a syllabary consisting of 72 syllabic sounds, 
which can be expressed by 48 characters, singly and 
in combination. 
c. Written plain language consists of words, i.e. 
combinations and permutations of the letters of 
the alphabet \vhich represent visually, and call 
forth vocally, the elementary speech sounds of which 
the spoken language is composed. In the case of 
polysyllabic alphabetic languages, the principles on 
which substitution ciphers rest may be applied in 
all cases. In the encipherment of the Japanese and 
Chinese languages, these principles cannot apply 
directly to the language. They first require a 
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conversion to other values that can be understood. 
This method of conversion and its implications will 


be demo7rated in future chapters. 
· 


7-3. (f5 Normal and Cipher Alphabets 


a. Good cryptography demands that there exist 
at all times a definite relationship between the plain- 
text and the cipher values. Hov.· this relationship is 
developed is determined by the particular system, 
but if it does not exist and is not constant, de- 
cryption of the message enciphered by that system 
is an impossibility. This relationship is brought 
about by the construction of a cipher alphabet. 
The primary difference between a cipher alphabet 
and a normal alphabet is that in the former the 
elementary speech sounds are represented by char- 
acters other than those used in the normal alphabet. 
There is no real limitation other than practicability 
on what these characters may be. They may be 
letters, figures, signs, symbols,_ or even a combina- 
tion of any one of these. 
b. A cipher alphabet is an ordered arrangement 
of the letters of a written language and the charac- 
ters which replace them in the cryptographic process 
of substitution. It consists of two components, a 
plain component and a cipher component. The 
plain component is the normal alphabet of that 
language, in which the letters of the plaintext are 
found. The cipher component is the sequence of 
characters from which the cipher equivalents are 
drawn. For brevity and for clarity, a letter of the 
plain component is designated by suffixing a small 


"p" to it, and a letter of the cipher component 


designated by suffixing a small "c" to it. Thus Ap 
means A of the plaintext, and Xc means X of tho 


ciphertext. The expression Ap=Xc means that A of 
the plaintext, or plain component, is represented by 
X in ehe 
ci hertext, or cipher component. 


7-4. ( 
Standard and Mixed Cipher Alphabets 
a. 
he plain component of a cipher alphabet is a 
normal alphabetical sequence, an alphabet "·here 


letters represent their commonly associated speech 


sounds and \Vhich appear in their normal order. 


This normal sequencing of the plain comporwnt is 


the norm. If the plain component is omitted, it is 


understood to be the normal sequence. The seqtwnce 


of the cipher component, which may be either 


standard or mixed, determines the classification of 
the cipher alphabet. 
b. Standard cipher alphabets are those alphabots 


in which the cipher sequence is the same us the 


normal sequence. For obvious reasons, a standard 


cipher alphabet must eithe · be reversed in direction 


or shifted from its normal point of coincidence "·ith 


the plain component; otherwise, Ap would eqmil Ac 


and all succeeding letters would equal themselvrs. 


c. Mixed cipher alphabets are those alphabets in 
which the cipher component no longer demonstrates 
the normal sequencing in part or in whole. Rather 
it is disarranged by· either some systematic process, 
an example of which \Vi!l be treated later, or is 
generated by some arbitrary and unmethodical 
process which results in 
a completely random 
sequence. 


Section II. ¢ UNILITERAL MONO ALPHABETIC SUBSTITUTION 


7-5. (~tandard Cipher Alphabets 


a. If a message is enciphered, letter for letter, by 


using one cipher component, the resulting crypto- 
gram is said to be enciphered by a uniliteral (one- 
unit) monoalphabetic (one-cipher alphabet) cipher. 
A standard cipher alphabet used for this purpose is 
of two types, a direct standard or a reversed standard. 


Example: 


In direct standard alphabets, both the plain and the 
cipher sequence are normal alphabets, i.e., lettt1rs 


follow one another in normal sequence and are 
individual from left to right. Only their points of 
coincidence are shifted to the right or left of the 
normal point of coincidence. 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C 
V W X. Y Z A B 0 D E F G H I J K L M N 0 P Q R S T U 


Key Ap=Vc. 


b. Reversed standard cipher alphabets also contain 
sequence is inscribed backward, from right to left. 
normal plain and cipher sequences except the latter 


Example: 


7-2 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C 
ONMLKJIHGFEDOBAZYXWVUTSRQP 


Key Ap=Oc. 
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c. Because of the difference in the direction of tho 
sequence in the two alphabets, the number of 
possible cipher alphabets produced by each method 
differs. Where direct standard cipher alphabets of 
26 characters are moved. against one another, there 
are only 25 combinations which are different, the 


26th being a repeat of the first, i.e. Ap=Ac. In 
reverse standard cipher alphabets, the number of 
possible combinations equals the number of letters 
in the alphabet, as the direction of the sequences 
provides no one point of coincidence where the 


whole alphabets are exactly the same. 


7-6. J.'{Reciprocity of Standard Alphabets 


a. The reversed standard cipher alphabet illus- 


trated above is also a reciprocal alphabet, i.e. the 


equivalents show reciprocity and are reversible in 


pairs. For example, Ap=Oc and Ac=Op, bnt note 


also that Hp=Hc and Up= Uc. The rPciproeity, 


and the identities shown, are a result of the method 
by which it was formed. Reciprocal alphabets may 


be formed by juxtaposing two alphabetic sequences 


which are identical, but ,,·hich run in diffnren t direc- 
tions. The occurrence of equal identities is dependent 


upon the point of juxtaposition. 1n thP alphabet 


above, Ac coincides with Op, the 15th letter of the 


alphabet. In the example below note that Ac is 
moved to a point belo'v Pp. Further note that <>qual 


identities no longer occur. 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


C 
PONMLKJIHGFEDCBAZYXWVUTSRQ 


Juxtaposition at every second interval produces two 
equal identities, and juxtaposition at even intervals 
does not produce identities. Note also that the two 


identities occur at an interval of 13 letters. Both of 
these numbers, 2 and 13, may be recognized as the 
factors of the number of letters in the English 
alphabet (26). Other alphabets of different length 
also exhibit this characteristic, the points of juxta- 
position producing identities and the distances 
between identities determined by their factors. 
b. A reciprocal alphabet which provides complete 


reciprocity and no identities may be produced in 


one of two ways: 
(1) By arbitrarily constructing a reciprocal 


alphabet by the random assignment of ndue,.; in 
pairs. For example, Ap is made to equal Kc: then 
Kp is made to equal Ac. In such an alphabet. the 


two components thus constructed eannot be ,;lid 


against one another to produce additional reciproca 1 


alphabets,. 


(2) By juxtaposing a sequence of an e\·en 


number of characters against the same sequence 


shifted exactly halfway to the right or left as below. 


ABCDEFGHIJKLMN 0 P Q R S T UVW X Y Z ABC DE F G HI J K LMNOPQRST[TWXYZ 
ABC DE F G HI J K L 'A-IN 0 P Q R S T U VW X Y Z 


Key Np=Ac 
Ap=Nc 


c. Reciprocal alphabets are inverse alphabets, 
since they may serve either as enciphering or de- 
ciphering alphabets. 


7-7. <f. Method of Encipherment and Decipher- 
ment 


a. When a message is enciphered using a uniliteral 
monoalphabetic substitution system, one plaintext 


value is replaced by one ciphertext Yalue. For 
example, using the cipher alphabet of paragraph 


i-5a, the following message can be enciphered 
(fig. i-1): 
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Message: 
LISTENING POSTS REPORT 'I'AllK l~OVEHENT 


Enciphering alphabet: Ap- Vc 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


C 
V W X Y Z A B C D E F G H I J K L M N 0 P Q R S 1' U 


Letter for letter encipherment: 


LISTENING POSTS P.EPORT TANK HOVE~:EIIT 
GDNOZIDIB KJNON MZKJMO OVIF HJQZHZIO 


Cipher text rearranged into five-letter groups, indicator 


and nulls added: 


ZYZYZ GDIJOZ IDIBK J;VONU ZKJMO OVIFH JQZHZ lOXXX 


Figure 7-1 (C). M onoalphabetic encipherment ( U). 


b. The procedure for decipherment is the reverse 


~f encipherment. Using the indicator, the cryptog- 
rapher constructs the cipher alphabet, and since it 


is nonreciprocal, he rearranges it on the cipher 
sequence for ease in deciphering. 


Deciphering alphabet: 
C ABCDEFGHIJKLMNOPQRSTUVWXYZ 


P 
FGHI JKLMNOPQRSTUVWXYZABCDE 


The message deciphered: 


GDNOZ IDIBK JNONM ZKJMO OVIFH JQZHZ 10 


LISTEN INGP OSTSR EPORT TANKM OVEME NT 


Message rewritten into word length: 
LISTENING POSTS REPORT TANK MOVEMENT 


7-8. (r/use of Monoalphabetic Ciphers 
tedious, but not impossible. Again. the practical 
a. ~:a~se of the extreme simplicity of uniliteral 
use of this type monoalphabetic substitution is also 
monoalphabetic substitution in general, and direct 
limited. 
or reversed standard cipher alphabet in particular, 
b. For the cryptanalyst, the study of these sys- 
its use for practical purposes is quite limited. Solu- 
terns is important not from the likelihood that he 
tion of these systems is generally very easy, involv- 
will encounter them in use, but from the basic 
ing two basic methods of analysis, one based entirely 
techniques and skills he will acquire. :\Ioreover, the 
upon a frequency distribution and the other based 
basic principles of the operation of the system, and 
upon a quicker mechanical process. The analysis 
the method of its analysis, are incorporated and 


and solution of messages enciphered by mixed- 
expanded in the more advanced and complicated 
cipher sequences may )e somewhat involved and 
manual systems he may encounter. 


Section Ill. (r;;{ SOLUTION OF UNILITERAL MONO ALPHABETIC CIPHERS USING 


STANDARD CIPHER ALPHABETS 


7-9. (¢Basis for Solution Using a Uniliteral 


frequency Distribution 
a. The solution of uniliteral monoalphabetic ci- 
phers where standard alphabets are used follows 
directly from two factors. 


(1) The fundamental characteristic is the one- 
for-one substitution. 


(2) The sequence of the letters of the cipher 
component is merely displaced if it is a direct 
standard or, if it is a reversed standard, it is re- 
versed and displaced. Because of this, a uniliteral 
frequency distribution of a cryptogram produced by 
standard cipher components will show crests and 
troughs whose relative spatial position and vertical 
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dimensions will be the same as a uniliteral fre- 
quency distribution for 
the plaintext of that 
cryptogram. 
b. If the cryptogram was enciphered by a re- 
versed standard alphabet there will be one excep- 
tion to the exact spatial correspondence between 


the two frequency distributions. That is, the pro- 


gression of the successi,·e peaks and troughs \Yill be 
in opposite directions. To observe this, note the 
plaintext messages and their accompanying cipher 
alphabets, cryptograms, and uniliteral frequency 
distributions in fignres 7-2 and 7-3. 
(1) Encipherrnent by a direct standard cipher 
alphabet. 


Message: 


ENENY ATTACKING ALONG ROUTE ONE \-liTH ES'::'H1ATED I:fFAliTRY 
BAT'1'ALIOU SUPPORTED BY TANKS FORWARD POSITIONS OVEI\RUH 
REQUEST IMMEDIATE REINFORCE!·lENT 


Direct standard cipher alphabet: 
Ap = Ta 


P 
A B C D E F G il I J K L M N 0 P Q R S T U V W X Y Z 


C 
T U V W X,Y Z ABC DE F G HI J K L M N 0 P Q R S 


Ciphertext: 


X G X F R TMMTV DB G Z T EllGZK lliVMXH 
G X P B M 


H G L N I 
B 11 G L ii 


G Y H K V 


AXLMB FTMXW B G Y T G MKRU'l' 
M M T E 8 
IHKMX WURMT G D L Y H KPTKW IHLlJM 


0 X K K N G K X J N XLMBF FXWBT U X K X B 


XFXGM 


Uniliteral frequency distribution - plaintext: 


~==­ 
A B C D 


~ 
~ 
- 
~ ~ 
~==-~ ==~ ~ ~=­ 
~ F G H I J K L M N 0 P Q 


~ 
~- 
~ 
~~ ~ U V W X Y Z 


9 2 2 4 16 3 2 1 9 0 2 2 5 12 11 3 1 10 6 15 4 1 2 0 3 0 


'l'otal 125 


Uni1iteral frequency distribution- ciphertext: 


~ 
~ 


= 
~jE. 
~- ~- 
- 
§E 
-~ ==~ ~ ~=- ~~ ~=-= = 
~=== ~== 
A B C D E F G ll I J 
K L M N 0 P Q R S T U V W X Y Z 


1 9 0 2 2 5 12 11 3 1 10 6 15 4 1 2 0 3 0 9 2 2 4 16 3 2 
. 
~ 
Direction of progression 
Total 125 


Point of 
coincidence 


Figure 7-t <t. Encipherment by a direct standard cipher alphabet (U). 
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(2) Encipherment by a reversed standard cipher alphabet. 


!·1essage: 


TANK COMPANY t10VIHG UP IN SUPPORT HOLD THE 
PRESE:I~T POSITION 


AFTER OHE SIX ZERO ZERO DISENGAGE AND FALL BACK Oli" l:lLOCKillG 
POSITION AS SITUA'l'IOil PERMITS 


Reversed standard cipher alphabet: 
Ap =He 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C 
MLKJIHGFEDCBAZYXWVUTSR(,]POfi 


Ciphertext: 


TMZCK YAXMZ OAYRE ZGSXE ZUSXX YVTFY BJTFI 


XVIUI ZTXYU ETEYZ f.fllTIV YZIUE P!IIVY NIVYJ 
EUIZG MGIMZ JHNBB LMKCY ZLBYK CEZGX YUETE 
YZMUU ETSl1T EYZXI VAETU 


Uniliteral frequency distribution- plaintext: 


~ 
~ 
~ ~= _- ~ 
~ 
~ - 
~ 
- 
~ ~~ ~~ ~ 
-- 
- 
--- 
- 
--- 
--- 
--- 
- 
--- 
--- 
--- 
-- --- 
A B C D E F G li I J K L M N 0 P Q R S T U V W X Y Z 


9 2 3 3 10 2 4 2 12 0 3 4 3 13 14 8 0 6 9 10 3 1 0 1 1 2 


125 


Uniliteral frequency distribution - ciphertext: 


~ 
$ 


=== 
iE 
- 
"¢-- 
j!§ 
=== 
-=== =-- -- 
ABC D EFGH IJKLMNOPQRS 


~ - 
=~ ~ 
~~g ~ E ~ 


'l' u v w· x Y 
:c; 


3 4 3 0 12 2 4 2 10 3 3 2 9 2 1 1 0 1 3 10 9 6 0 s 14 13 


Direction of progression 


./1 
"'-! 
Point of coincidence 


Figure 7-3 (C). Encipherment by a reversed standard alphabet (U). 


c. In the preceding examples, several points should 
be noted. Tho spatial relationship of peak> and 
troughs within either cipher component remains 
constant, differing in the points of coincidence and 
the different directions in which· the order of their 


progre~sion may lie, relative to the plain compo- 
nents. These differences are purely mechanical, due 
only to the point at which the alphabets are juxta- 


posed and the direction of their inscription. Another 
difference, which will be shown only wlwn the 
frequency distribution of the ciphertext is com- 


pared to an expected normal uniliternl frequency 


distribution, is thnt a variation in the order of the 


high-frequency letters occurs. This is a re~mlt of the 


construction of the plnintext and in no \Yay in- 
validates the frequency distribution or its use. 
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7-1 0. ~ystem ldentiAcation and Recovery of 
The Cipher Alphabet 


a. In practice, the identification of a given cryp- 
tographic system as being unilitcral monoalphabetie 


substitution, based on a direct standard cipher 


alphabet and tho recovery of the plaintext values 
of the cipher sequence of that alphabet, involves 
one and the same process, based upon the charac- 


teristics of standard cipher alphabets and thl\ nor- 


mal uniliteral frequency distribution. A freqtwney 


distribution made of a cryptogram produced by this 
type system will shO\v the characteristic peaks and 
troughs of a normal uniliteral frequency distribution 
for the plaintext, except peaks and troughs will not 
correspond and the direction of progression of the 


sequence may be reversed. Identification of this 


system's use, and the recovery of the plaintext 
values of the cipher sequence, lie in fitting tlw 


uniliteral frequency distribution of the eiptH'rtnxt 


to a normal uniliteral frequency distribution. This 


is kno\nl as "fitting the distribution to the normal." 


b. Identification and recovery of the plaintext is 
then simply a matter of identifying the plaintl1Xt 


value of t\YO or more cipher letters t1nd the nsP of 
these values to determine tho direction of progn's- 


sion of the cipher sequence relative to the plain 
sequence. The identification of a cipher letter, 


determining its associated plaintext value, is bas<'d 


upon its frequency of occurrence relative to all 


other letters of the cipher sequence. For examplP, 


the value of a high-frequency cipher letter imnwdi- 


ately is suspected as one of the normal high-frP- 


quency letters (E, T, N, R, 0, A, I, S). By assuming 
the values of several high-frequency ciphrr lntt<'rs. 


a base can be established to correlate the peaks and 


the troughs of the ciphertext distribution to tho,;(' 


of a normal uniliteral frequency distribution. 
c. In fitting the actual distribution of thP ciplwr- 


text to the expected norm, two functions must lw 


considered. First, correspondence of va[up,.; 11·ill not 


twccssarily be exact regarding frccpwncies of occnr- 
nnc('. For oxampln, the normal on!Pr of oc<'lliTPilcl' 


for tlw high-frequency plaintext lntt<,rs i,.; E. T. X. 


R, 0, A, I, S. But, note that tlH' fmqut•ncy of til(',.;(' 
sanw letters in the cryptogram in paragraph 7-9br2). 


in their order of occurrence, is 0, X, I, E. T, A, :-;. 


R. Second, although frequency of DU'llrn•nc<' may 
vary. tlw spatial relationship bdll.<'<'ll tL<· high- 
freq twncy letters, and all l<'t tnr,.;, 11·ill n'm a in t'< Ill- 


stunt. Becn\lSP of the fornwr fact, t lu· point "f <'o- 
incidt>ncc of tlw two ,.;eqtH'llC('S nwy bt• in qtu·,tiotl. 
However, this can ahntys be rpsolvcd by considt•ring 


tho spatial relationship of pPaks and 
trollghs. 
Considorrd as a group, thPir <'oiTI'"PolldPn<·n of 
freqtwney bnt11·cen seqtH'IlC<'s shottld ahntvs lw 
relati,·cly close. 


d. In the final analysis, the accuracy uf identifil'a- 


tion and recovery of the cipher alpl111bet hinge,; on 
the consistent substitution of the plaintext ntlue,; fur 
the cipher character in the eryptogram. re,.,ttlting in 


intelligible plaintext. If this is not the <'a,;e. no 


matter ho\\· close the approximation bet11·ee11 at'tlttd 
and expected 'requencies, or ho11· 11·e!l the fit i,.;, 
Dnly two pos.-<tJilities exist. Fir:;t. the c losene,.;,.; of 
the fit is pure coincidence and another equally good 


fit can be obtained from the same data. Second. the 
cryptogram involves something more than ,.;imple 


rnonoalphabetic substitution by menn,.; of single 
standard cipher alphabet. 


7-11. f~ Solution Using a Uniliteral Frequency 
T'oistribution 


t!. Essentinlly, the method of ,.;nltttinn "' nn 


attempt to fit the distribution of the ('iphertext to 
the expected normal distribution. Accordingly. the 
first ,.;tep is to prepare n uniliternl frequetH·y di,.;tri- 
htttiott of it::; ciphertext. Using the mp,.;,.;a~e in figlll'e 
7-4, the distribution can be deri,·ed. 


YJCAX UBANY XACNJ BC:IAW BuXYN BXOYA 


XBYNL CQRUU VRWllM J:V'l.'LX £!/ANI! KHBCA 


XflPYX Rr/CBW flJALA ,'/BCJO 


~ 
~~~-- 
=t_ 
- 
;t::::.---- 
-~~~ 


A B C D E F G H I J K L 0 
li 0 P Q R S T U V W X Y Z 


9 8 7 1 1 0 0 1 0 3 1 2 2 lU 2 1 1 3 0 0 4 1 G 8 6 0 


Figure 7-4 (C). Uniliteral frequency distribution, substitution ciphertext ( U). 
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(1) If there is any question as to the system 
involved in the production of this cryptogram, the 
uniliteral frequency distribution above should serve 
to resolve it. First, substitution, rather than trans- 
position is indicated by the fact that normal low 
and medium-frequency letters in this distribution 
are high in occurrence. Were it transposition, where 
values are unchanged, there would not be this 
reversal of frequency characteristics. Second, uni- 
literal monoalphabetic substitution is suggested by 
the peaks and troughs, shown by the distribution, 
which do not correspond to their normal positions 
relative to the alphabet. This further suggests a 
displacement of the· points of coincidence between 
the plain and cipher sequence. If nonmonoalphabetic 
substitutions are involved, the peaks and troughs are 
suppressed. 
b. Solution of this type system depends upon 


assuming the plaintext value of one or more cipher 
letters, est·ablishing the direction of progression, and 


attempting to produce intelligible plaintext as the 
final text. Comparing this distribution to a normal 
distribution, certain similarities and dissimilarities 
are observed as shown in figure 7-5. 
(1) Note that the pattern of peaks and troHghs 


in the normal distribution have a specific spatial 


relationship, the highest crest over the letters A, 
E, I, N, R, S, 0, and the toughs marked by T, B, 
G, J, K, P, Q, U, V, W, X, Y, and Z. Note also that 
the letters R, S, T, and U combined, form a plateau, 


as does L, l\1, N, and 0. In horizontal distances, 
A is separated from E by three letters, E from I 
by three letters, I from N by four letters, and N 


from T by five letters. 


I 
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Figure 7-5 /Identification of ciphertext values by 


comparison ( L'). 


(2) Examination of tlw distribntion ·Jm•parPd 
from thr ciplwrtext revnab a·similur ,.;putial pattt·nt. 
but one which is located abo\·p diffN<'llt lt•ttt·r,.;. 
:\ott> that a peak located at J is followed h·: alwlht•r 


at .V, separated by three spacrs; anothPr is locatt•d 


at R, again a three space interval; C abo reprt',.;Pn t,.; 
a peak, at an interval of t\\'O spaePs. and is follo\\·l'cl 


by a plateau at W, X, and Z. 


(3) Considering the cyclic natun• of tiH' alpha- 


bet. Z followed by A, and assuming that thl' pr<,g.Tes- 
sion of the pattern in the ciphcrtl'xt's distribution i,.; 
to thl' right, the two patterns can bl' ali1u•d by 
,.;hifting the cipher sequence to tht' ldt llntil J 
cipher coincides with A plain. 


P 
A B C D E F G H I 
J K L 
~[ ~ 0 P Q R S T U V W X Y Z 


C 
JKLMNOPQRSTUVH'XYZABCDEFGHI 


(4) As this alphabet is not reciprocal, i.e. Ap=Jc 
but Ac does not equal Jp; the values must be invertt•d 


to form a deciphering alphabet. That is, the ciplwr 


i'{)mponrnt placNl in alphabetic order 11·ith the plain 
c·om(Hlllcnt below it. 


For example: 


C 
A B C D E F G H I J K L .\I .\' r I P Q R S T U V l-V X r /.: 


P 
R S T U V W X Y Z A B C D E F G H I J K L M N 0 P Q 


(5) Using the above deciphering 
alphnlwt. 


the cryptogram can now be deciphered, succp,.;s 


indicating that all previous assumptions are corn·ct. 


ff failnre results, the ana\y,.;t nwx:uninp,.; t h<' distr-i- 
llltti<lll attempting to dl'tl'l'lllitw tlw colT<'<'! point 
of coincidence between the t\\·o alplwlwt,;. 
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PATRO LSREP ORTEA :-iTERN SLOPE SOFPR 
X B Y N L C Q R U U V R WN Jf J WJI LX EN AN M K H B C A 
OSPEC THILL MINED ANDCO VERED BYSTR 
XWPYX RWCBW NJALA NBCDO 
ONGPO INTSN EARCR ESTUF 


PATROLS REPORT EASTERN SLOPES OF PROSPECT HILL ~Ur\ED 


AND COVERED BY STRONG PefNTS NEAR CREST 


I CONFIDENTIAb. 
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c. In the example above, a direct standard cipher 
alphabet is used in enciphering the plaintext. Had 
the cipher alphabet been a reversed standard, the 
same methods of analysis would have been fully 
applicable, the only difference being that the pro- 
gression of the relationships of peaks and troughs 
in D. distribution of the ciphertext. would be in re- 
verse order as well as offset. To aline this distribution 
to the normal, it is then inscribed in reverse order 
after determination of the point of coincidence. 
Further, a slight variation exists in the final de- 
ciphering text. As reversed standard cipher alpha- 
bets are partly reciprocal, the construction of a 
deciphering alphabet is not always required. 


olution by Completing the 
Plain 
Component 


a. The foregoing method of solution involves the 


construction and study of a frequency distribution 


as a means of recovering the plaintext. There is 
another method, applicable to direct 
standard 
alphabets and to reversed standard alphabets "·ith 
a slight variation, which is much more rapid. As 
this system is purely mechanical, it does not involn 


the construction of a frequency distribution. Tlw 


principle underlying this method of analysis is 


based upon the inherent characteristics of HnilitNul 


monoalphabetic cipher alphabets, when> din·ct stand- 


ard or reversed standard alphabets are used us the 


cipher sequence. The key element in both cases is 
an orderly sequence of values present in both the 


plain and cipher sequences. 
b. The significance of this characteristic 1s sP0ll 


in the following cipher alphabet. 


P 
ABCDEFGHI JKLMNOPQRSTUVWXYZ 


C 
JKLMNOPQRSTUVXWYZABCDEFGHI 


(1) Note again that the cipher alphabet was 
produced by juxtaposing two normal alphabets, 
the lower or cipher sequence being displaced 9 
letters to the left until Ap=Jc. This relative degree 
of shift is equal in all cases as long as the sequence of 
the letters in the alphabets are not disarranged. For 
example, note that there is a 9-letter difference 
between Be and Kc, Cp and Lp, etc. As ·a direct 
standard cipher alphabet is being dealt with, there 
are only 25 possible positions in which the two 
alphabets may be juxtaposed to produce a cipher 


alphabet. The 26th position, Ap=.lc. clearly gins 


only plaintext. Where this sytem is used thPn. only 


one of the 25 possible positions can br corn•ct. 


(2) The alphabet above 
could 
b(' 
,;lippt>d 


through all 25 possible positions, from Ap =Be to 
Ap=Zc, checking each for its ability to dPciplwr a 


message. This is time consuming. 
Insteacl. 
the 


sequence of the letters themselvrs can lw ttsed. 


Note the encipherment of the folhl\\·ing plnintL•xt. 


first by the cipher alphabet abovE>. and t hl'll b.'· n 


similar alphabet where Ap=Kc. 


C 0 NT A C T MADE WI T H EN EM Y Plaintext 


LXWC J L C V J MN F R C Q NWNVH Cipher Ap=Jc 
MYXDKMD WKNO GSDR OXOWI CipherAp=Kc 


(3) In the example above, the sequence of 
letters in the columns is formed by superimposing the 
ciphertext progress, follo,ving each progressive dis- 
placement of point of coincidence. Therefore, given 
the cryptogram, a solution can be obtained simply 


by inscribing alphabets vertically in 
~('q 1 ll' tltial 


order, using as the starting point Pach J,·rt,·r .,f tht• 


ciphertext as demonstrated in figun• 7 ti 
I 11 df(•ct, 


this process duplicates 
the 
po,;sibk 
··ipltt·rt<>xt 


derived from all 25 positions . 
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GXKGA TJKXS UXZGX LOXKD 
liYLHB UKLY'l' VYAHY lfPYLE 
IZi·liC IILMZU r..'ZBIZ NQZf.JF 


JANJD WNiJAV XACJA ORANG 
KBOKE Xl!OBW YBiJKB PSBOH 
LCPLF YOPCX ZCELC QTCPI 
l.JDQ!·;'G ZPQDY ADFND RUDQJ 


llERllll AQRJ:;Z BEGNE SVERK 
OFSOI BRSFA CFHOF T~'FSL 
PGTPJ CSTGB DGIPG UXGTU 
QHUQK DTUlJC EHJQH VYHUN 


RIVRL EUVID FIKRI viZIVO 


SJv!S1~1 FVV!JE GJLSJ XAJf-!P 
TKXTIJ GWXKI:' HKJ'fTK YBKXQ 
ULYUO HYYLG ILNUL ZCLYR 
VHZVP IZZlfH Jf.!OV/1 ADl!ZS 
rlllAWQ JZANI KllPWll BENAT 
XOBXR KABOJ LOQXO CFOBU 
YPCYS LBCPK t;PJ?YP DCPCV 


ZQDZ1' J.!CDQL !IQSZQ EliQ/.JW 
AREAU HDERl-1 ORTAR FIPEX 
BSFBV OEFSN PSUHS GJSFY 
CTGCW PFGTO QTVCT HK'l'GZ 
DUHDX QGHUP RUWDU ILUHA 
EVIEY RHIVQ SVXE V Jl:VIB 


FWJFZ SIJrlR T'YIYFW Kl/WJC 


Cipher text 


Plair. text 


Figure 7-6 (C). Solution, by campleting the plain component, direct standard cipher alphabet ( 0. 


c. In those cases \vhere a reversed standard 
cipher alphabet is used, a preliminary step is required 
to form the base for the projection of the vertical 
alphabetical sequences. This is required because, 
although a sequence is present in the ciphertext, the 


mechanics of the system are reversed. For ;·:xarnple. 
with the follo\\·ing message, n bust> can lw t>"t n hli,-hod 


as shown in figure 7-7. Then t>ach cnhuntt ,·:til hP 


completed to recover the plaintext. 
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Message: 
X R S W X T S A D Y H P D S E I U L P Y 


A B C D E F G ll I J K L M N 0 P Q R S T U V W X Y Z Plain 


Z Y X W V U T S R Q P 0 N M L K J I H G F E D C B ~ Cipher 


CIHDC GHZWB SKw'lJV RFOKB 


CIHDC ·cHZWB 
SKWHV 
RFOKB 
Cipher text 
DJIED !II AXC 
TLXIW 
SGPLC 


EKJFE 
IJBYD 
UMYJX 
THQND 


FLKGF 
JKCZE 
VNZKY 
UIRNE 
GNL!IG 
KLDAF' 
WOALZ 
VJSOF' 
JJNMIH 
LUEBG 
XPBi·lA 
WK'l'PG 
IO!JJI 
NNFCH 
YQCNB 
XLUQH 
JPOKJ 
NOGDI 
ZRDOC 
YMVRI 


KQPLK 
OPHEJ 
ASEPD 
ZNWSJ 
LRQ/;'L 
PQIFK 
BTFQE 
AOXTK 


MSRN!f 
QRJGL 
CUGRF 
BPYUL 


NT SON 
RSKJlll 
DVHSG 
CQZVfl 
OUTPO 
STLIIJ 
Ei-liTH 
DRAWII 
Plain text 


PVUQP 
TUNJO 
FXJUI 
FSBXO 


QWVRQ 
UVNKP 
GYKVJ 
FTCYP 
RXWSR 
VWOLQ 
HZLWK 
GUDZQ 
SYXTS 
WXPI1R 
I AM XL 
HVEAR 


TZYUT 
XYQNS 
JBflYN 
IYIFBS 
UAZVU 
YZROT 
KCOZN 
JXGCT 


VBAWV 
ZASPU 
LDPAO 
KYHDU 
WCBXW 
AB1'QV 
NEQBP 
Lzn;v 
XDCYX 
BCURW 
!IFRCQ 
MAJFW 
YEDZY 
CDVSX 
OGSJJR 
NBKGX 
ZFJ::,'AZ 
DEWTY 
PHTES 
OCL!JY 


AGFBA 
EFXUZ 
QIUFT 
PDf.liZ 
BHGCB 
FGYVA 
RJVGlJ 
QEllJA 


Figure 7-7 0. Solution by wmpleting the plain component, reversed standard cipher alphabet (F). 


d. Using the foregoing method, when the letters 
of a cipher alphabet are known sequences, con- 
siderable time and effort can be saved. In some cases 
this prior knowledge is the only possible means of 
solving very short cryptograms that might other- 
wise be unsolvable. The essential point in any case 


is that the sequence of the letters used must be 
established. Even mixed sequences can be handled 
in exactly the same way. If, however, -the sequence 


is unknown, methods to be covered later must be 
used. Generally, since this method is so easy, it 
should be a first step in those cases 
"·hen~ tlw 


cryptogram is obviously a substitution cipher in 
monoalphabetic terms. First a direct standard 


alphabet should be tried, and then a rcvPrsed 


standard alphabet should be tried. If both fail, a 


logical assumption is that tho cryptogram in ques- 


tion involves a mixed cipher alphabet. 
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CHAPTER 8 C'r" 


UNILITERAL MONOALPHABETIC SUBSTITUTION SYSTEMS USING MIXED 
CIPHER ALPHABETS 


Section IAENERATION AND USE OF MIXED CIPHER ALPHABETS 


8-1. ~xed Cipher Alphabets 
a. Mixed cipher alphabets differ from standard 
cipher alphabets in that one or both of the sequences 
is a mixed sequence. A mixed sequence is a series of 
letters that does not correspond to normal sequential 
order of the alphabet used. As a general rule, a 
mi.xed cipher alphabet will consist of one of the 
following mixes. 


· 
(1) The plain component is a standard sequence; 
cipher component is a mi.xed sequence. 
(2) The plain component is a mixed sequence; 
the cipher component is a standard sequence. 


(3) Both components are the same mixed 
sequence with displaced points of coincidence. 
(4) Both components are different mixed 
sequences. 
(5) Both components are the same mixed 
sequence but one reversed. 
b. Two main types of mixed alphabetic sequences 


are randomly mixed and systematically mixed 
sequences. The latter type because it is based upon 
a scheme that by its nature is systematic, is useful 
because it makes possible the derivation of one or 
more mixed sequences from easily remembered 
words, phrases, or similar keys. Additionally, it 
does not require written documentation. A dis- 
advantage in producing a mixed sequence through 


a systematic disarrangement is that the possibility 


Example: 


of its analysis is always present. As practical 
considerations set a limit to the complexities that 


can be introduced by systematically mixing an 


alj)habet, where greater security is required, ran- 


domly mixed alphabets are used. 
c. Randomly mixed alphabets give more crypto- 
graphic security than do the less complicated 


systematically mixed alphabets because they give 
no clues to the position of letters. ·whenever the 
laws of chance operate in the construction of a 


mixed alphabet, a thorough disarmngement is 
likely to be produced. The primary disadvantage 


of random alphabets is that they are not susceptible 
to local generation. They must be reduced to 


·writing and distributed to all interested corre- 
spondents with explicit instructions pertaining to 
their use. 


8-2. (a Keyword Mixed Cipher Alphabet 


a. ~~ of the simplest types of systematically 


mixed sequences that is used in a cipher alphabet 


is the keyword mixed alphabet. In this type. the 
disarrangement is achie,·ed through the use of a 


keyword to establish the frumework of the sequence. 


The sequence begins with the key\nH·cl. Any letter 
repeated in the keyword is used only once, <lt 


its first appearance. Thereafter it is dropped. These 
letters are then followed by all other lllllbed letters 
of the alphabet in their normal sequence. 


Keyword: CRYPTOGRAPHIC 


Repeated letters dropped: CRYPTOGAHI 


Letters not appearing in keyword added in their normal 
sequence: GRYPTOGAHIBDEFJKLMNQSUVWXZ 


b. This type sequence, when paired with a se- 
quence other than a reversal of itself is nonreciprocal. 
When positoned against a double inscription of it- 
self it is nonreciprocal, except at one juxtaposition. 
Therefore, for convenience in enciphering and de- 
ciphering, two alphabets are constructed, an en- 


ciphering alphabet in which the letter of the plain 
component coincides with the normal sequence, and 
a deciphering alphabet in which the sequence of 
letters in the cipher component coincides with the 
normal. 
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Example: 
Enciphering alphabet 
P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C 
CRYPTOGAHIBDEFJKLMNQSUVWXZ 


Deciphering alphabet 


C 
AB'Cl)EFGHIJKLMNOPQRSTUVWXYZ 


P 
HKALMNGIJOPQRSFDTBUFVWXYCZ 


c. The key,vord or phrase used need not consist 
of any definite number of letters, although those 
which most thoroughly disarrange the normal se- 
quence are most appropriate. The reasons for this 
can be seen in the enciphering alphabet above. 
Note that the two distinct segments of the cipher 
sequence are obvious, the key,vord and the remain- 
ing alphabetic sequence. Note also that in the de- 
ciphering alphabet, neither is completely apparent 
though there is evidence of sequencing sho11·n 


underlined. The importance of the former charac- 
teristic is that it provides the analyst 11·ith a means 
wliereby the solution of a cryptogram is hastened. 
The analyst needs only to reconstruct the cipher 
alphabet in terms of an enciphering alphabet, as 
analysis of the message progresses, using each value 
as it is recovered. Once a partial recovery passes a 
certain point, it may be possible to recover the 
alphabet using pattern alone. 


8-3. mransposition Mixed Cipher. Alphabets 


a. It is possible to disarrange the sequence of an 
alphabet even more thoroughly by applying any 
one of the transposition methods treated previously 
as cipher systems. The alphabet to which the trans- 
position process is applied may be either a standard 
alphabet, a keyword mixed alphabet, or even a 
random alphabet. In a random alphabet, little is 
gained by disarranging the sequence. Some of the 
possibilities offered by this method are illustrated 
below: 
(1) Simple columnar transposition using key- 
word mixed alphabet: 


QUADRNGLE 
BCFHIJKMO 
PSTVWXYZ 


Q B PUC SA F T DHVRIWNJXGKYLA1ZEO 


(2) Numerically keyed columnar transposition: 
8 5 3 4 7 2 6 1 


UNILTERA 


BCDFGHJK 


MOPQSVWX 
YZ 


AKXEHV I DPLFQNCOZRJWTGSUBMY 


(3) Ronte transposition (alternate n•rtical): 
VEHICULAR 


B D F G J KitfN 0 
PQSTWXWZ 


VB P Q DE H F S TGICJWXKULvfYZ.VARO 


b. The systems of disarrang<'mPnt ubon• prod1tct> 
<:ertuin patterns as a result of tlw nwehunicul !H'oct•ss 


involved, and due to the ulphubt>t sdt>ctl'd for 
disarrangement, which will proYidP thP tmnlyst 
11·ith a means of n•covery. Xote that tiH· kt-y11·orcl 
appears in the first row and that thP sltcct•t-ding- 
rows contain the remaining alpha bdic srq lll' ll('l'. 


The last row, an incomplete row, contains so!ll(' 


portion of the sequence CVH'XYZ. ThPst• lust 


letters then are scattered at specific inwn·als thro~tgh 


the cipher alphabet by the process of columnar 


extraction. If the extraction is straight columnar. 
the letters appear. at an inten·al eq nal to the number 
of ro1Ys of the matrix, in sE'quential order kft to 
right. If the extraction procE'ss is 
nllmerically 
keyed, the letters appear in kPy number orckr. again 


at intervals equal to tlw numbPr of ro\\·s. In tht• 
ease of ro1tte transposition, pattt>rns nl,;o Pxist but 


they arc usually not so pronounced. Ont• ,.;ueh 
pattern is the pairing of tlw tNminnl kttt•r,.;. :\ott• 


that vi'X and YZ are paired in tlw nlphnbt•t abon. 


8-4. r£ Decimation Mixed Cipher Alphabets 
a. In this method of deriYing a systt•matieally 


mixed sequence, an alphabet. either a normal or a 
keyword mixed sequence, is counted off. ll'ttor by 
letter. using a predetermitwd intpn·nl. As t•neh 


letter is dccimatcd, or eountl'd off. it is tdiminnted 


from the basie sequence and set aside. Till' t·onnt 


continues around tht1 alphabet until all letters <U'e 
eliminated. As the letters <ln1 elimitwted. tlwy are 


set down in tho order of their elimination to form a 


new sequence. An example of this method is depicted 


in figure 8-1. 


8-2 
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t:nNI=IRI=NTIAI 


Basic alphabet (keyword mixed sequence): 


TELGRAPHBCDFIJ~!NOQSUVWXYZ 


Decimat.ed at an internal of 6: 


TELGRAPHBCDFIJ~1NOQSUVWXYZ 


12345612345612345612345612 
A 
F 
0 
X 
34561 23456 12345 61234 56 
G 
D 
Q 
z 
123 4 5612 
34561 
2345 6 
H 
M 
y 
123 4 5 61 .234 5 6123 
B 
s 
456 1 2 3 456 1 
234 


L 
K 
56 
1 2 3 45 
6 
123 
E 
N 
4 
5 6 1 23 
456 
p 
w 
1 
2 
3 45 
61 
u 
2 
3 
4 56 
1 
J 
2 
3 
4 5 
6 v 
1 
2 
3 4 
5 
6 
1 2 
R 
3 
4 5 
6 
1 2 
T 
3 4 
5 6 
I 


AFOXGDQZHMYBSLKENPWUJVRTIC 


As Cis not eliminated in the decimation process, it accordingly appears 


as the last letter of the sequence. 


Figure 8-1 t· Derivation of mixed sequence by decimation (U). 


P..BCDEFGIIIJKLMNOPQRSTUVVD .. 'YZ 


b. Another method of decimating an alphabet, 
which is at once simpler but also limited, is to use 
each letter in the count whether or not it has been 
used before. For example, in figure 8-2 the standard 
alphabet is decimated at an interval of five. 


12345123451234512345123451 
E 
J 
0 
T 
Y 
23451234512345 - etc. 
D 
I 
N 


E:JOTYDINSXCHMRWBGLQVAFKPUZ 


Figure 8-2 (C). Decimation, reuse of letters in count (U). 
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The limitation of the method is that the interval 
must be an odd number, as even numbers will 
cause repeated letters. For example, in figure 8-3 
a standard alphabet is shown decimated at an 
interval of four. 


AI3CDEFGHIJY.U1NOPQPSTt.JV\-7XYZ 


12341234123412341234123412 
34123412341234123412341234 
12341234 


DHLPTXBFJNRVZDH 
Repeated letters. 


Figure 8-8 (C). Repetitions in decimation as a result of et·en 
i 


Section II. ~ECOVERY OF MIXED CIPHERn:~;~~n;;;~ (Ul. 


8-5. 
General 
for two reasons. First, if the sequen('e of the cipher 


a. 
e analyst should always attempt the re- 
component has an obsen·ed pn t tern. decirna tion. 
co very of the method used in generating the cipher 
keyword, etc., it will appear in this arrnng-emen t. 
alphabet simultaneously with the analysis of the 
Thus any evidence of system in its <·onstntction. 


cryptogram. This effort is to be distinguished from 
ho,,·e,·er slight, may serve to collnbomte identifit·a- 


the normal reconstruction of the cipher alphabet 
tions already made, and may yield the <'lues ne('e,;sary 
which occurs us a matter of course \\·ith the anulvsis 
for complete identification of the method llsed and 


of a cryptogram. The purpose of recovering ·the 
total reco,·ery of the alphabet. Second. once a 


method of generation of a cipher alphabet is to 
method of cipher alphabet generation lw,; been 


enable the analyst to recover the cipher n\phubet 
determined, it affords an in,.;ight into tl1e ;_!eneral 


in its entiretv and therebv aid in the solution of the 
method, kevs, and kevwords used and tlla\- lH' <'lf 


cryptogram .• If sufficient. cipher-to-plain vulues can 
assi,;tance i1; subseque1;t studies of similar tn·e,..,..n~e,.;. 


be obtained by reconstruction as a by-product of 
._./. 


analysis of the message, the possibility exists that 
8-6. ~ Recovery of Keyword Mixed Sequences 


they may be used to determine the method of gen- 
a. Recovery of key\\·orcl mixed 
,;l'([1H'tll'~'"· "-lw 11 


erating the cipher alphabet. Where this can be 
used as the cipher component \\-ith a standard 


achieved early in the solution of the message, a 
sequence as the plain compom•nt. presPnh littl<- 


great deal of effort can be saved and, in some cases, 
or no difficulty. The primary probl<•m likl'ly to lw 


transform the process of cryptanalysis to one of 
encountered is one of recognizing t h1• 
hy\\-ill'd 


decipherment. 
given only a few values. Hmn•n•r. t'Y<'Il hl'l'<' a fP\\- 


b. Cipher alphabets should be reconstructed in 
rules apply that will aid thP analyst. For Pxnmpl!-. 


the form of enciphering alphabets, the plain com- 
the partially rnconstructl'd PnciphPring nlphnhl't 


ponent in alphabetic sequence. This is important 
bolo\\· was dt>rin•d through tlw annl,,-,-is nf a lll<'""'ag<'. 


P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C 
S 
Z 
V 
TH 
DFGI 


b. A keyword mixed sequence can be divided 


arbitrarily into two segments, that composed of 
the keyword and that composed of the remaining 
a'phabetic sequence. Having previous knowledge of 


what constitutes the normal alphabet and its 
sequence, the analyst can usc this with 11 minimum 
of recovered values to recover the keyword segment, 
the unknown. Examination of the cipher sequence 


above reveals the possible position of the two st~g­ 


ments divided by the letter Z. It is possible that Z 


is part of the keyword but not very likely. If tht~ 
keyword starts at this point, it runs to some point 
to the right. The cipher sequence DFGI is natural, 


a good alphabetic sequence possibly m11rking the 


resumption of the alphabetic sequence and therefore 


the end of the keyword, except that the E and H 
are missing. The His noted preceding the sequence 


DFGI in thP keyword segment. The E. a high- 


frequency lntter, is safply asSl!nH'd to lw <l part nf 


the keyword also. 


(1) The object now is to dderminP those 


lrtters of the alphnbetie st>gnwnt. 
B~· ..;n doing. 
certain lettnrs can be eliminated 11·hich mllst thL'Il lw 


part of the keyword. The SJHlCe bl'tm'l'll t ht• S and 
Z provides for only throe lt•tters. fn tlw <llphabctic 
secpwnce, six letters apjwar. But of tht• ,;ix. 1· anJ 


T are already placed btving fom kttpr;;. C!LYT. 


Also tlw space bct\Yecn tho TH and tlw [) pro,·idt>s 
two spaces for tlw IPtters ABC'. Of tlwst' pos,.;ibilitit's. 


it is far more likely that tiH• p\a.ct'Illl'lll i,; [ 'XT 
and BC, though tho formt'I' may abo 
hl~ ['WX. 


Accepting the combination ['X1', tlw alphabt>t is 
now shown as follows: 


p 
c 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 
SUXYZ 
V 
THBCDFHI 
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(2) At this point, the assumed value is checked 
against the cryptogram by attempting further 
decipherment, success confirming the assumptions. 
Further analysis of the sequence depends upon tlw 


discovery of new values as a result of confirming 
the assumed value, i.e., the whole process is likP a 


series of building blocks. The assumption of otw 


letter may aid in completing a word in a cryptogram 


or may suggest another letter which in turn provides 


the basis for the assumption of y0t anotlwr value. 


This value then is checked again:-;t both tlw alplwlwt 
and thn frequency distribution of thP ciphvrtl'Xl. 


This in turn nnablns tlw analyst tl• l·xpand tiH· 


cryptogram and the cipher sPqtwnn·. Fqr l'Xnrnple. 
assume that. in tiH• prol·t•ss of confinning t lj(' l!•t l!•r-, 
assumed previously, tlw ttnaly:-;t find:-; 
t !tat thl· 
letters Hp=.·!c, Lp=Oc, and \Vp=Kc. Th!• alphalwt 
no,,· appears: 


P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C 
SUXYZL AV 
ORTHBCDFGIJK 


(3) On this basis, Jc is equated to Vp by posi- 
tion alone and so placed in the sequence. The place- 


ment of 2\1, N, P, and Q is now quite easy. Threl• 


of the four must bP associated with X. Y, and Z of 
the plain scqtwnce. Zp, a low-frequency lcttPr, lends 


itself admirably to this association. Tho analyst 


need only check his distribution for 
<~n!' of till' 


letters i.Vl, N, P, or Q which citlwr dol'" 1wt appl'ar. 


or appears rarely. For example. findin:: 11" <><'l"lll"- 


rPJH'C of a Qc he at once eqllat(ls it to Zp. l,..,.,tllc-l' it 


is the only letter \\·hich imnwdiau·ly pn•(·<·dt•c- tIll' ~- 


P 
ABCDEFGHIJKLM~OPQRSTUVWXYZ 
C 
SUXYZL AV 
ORTHBCDFGIJK Q 


(4) The letters now remaining to he plan•d 


are E, A1, N, P, and W, open.ng two possibilitit>s. 


Tho kcy\Yord is assumed, if evidence warrants. 


Each value is checked by decipherment or by 11sing 


the frequency distribution. The plaintext value is 


assumed and then checked by decipherment. In 
any event, a solution is soon reached. 


8-7. mecovery of Transposition Mixed Cipher 
Alphabets 
a. The recovery of transposition mixed cipher 


alphabets involves essnntiall_.,· till' -,:till!' !Jl"ill"l''"'"" ac- 
the cryptanalysis of transpo,;ition ciphn:-;. !ll th·· 
latter, the analytic attacks nn• ba,..;l'd ll!Jillt t lw in- 
hPrr•nt characteristics of tlw sy.--t!'!ll 11·ith initially 


little or no knowledge of the plaintext otlwr tlwn 
any characteristics which may h a,.(, a pp<·nrl'd in 
the ciph_ertext. In the case of trnn:-;po:-;it1illl mi.\:r•J 
ciphor alphabets ho\n'vcr, tlw annl.'·..;t 
j,; dt·:tlins: 
11·ith several knO\nl factors. For (':>;alllpll'. l'Xamilll' 
the enciphering alphabet belo\\·. 


P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C 
R AME B P 0 D Q 0 F V N G W S H X T J 1· UK Z I L 


(1) The cipher component is not a key1nlrcl 


mixed sequence. A keyword may have been used t" 


prepare a base alphabet, but on appcarancl' t hi:-; 


baso appears· to have been systematically di,-,zu·- 


ranged. This could have been done in one of t 11 '• 


primary ways, transposition or decimation. A.s:-;uln- 


ing then that the alphabet was produced by ,.;oflll' 


means of transposition, the analyst scans thl' ,.;p- 


quence for some pattern. The V, W, X, Y, and ;( 


appear at an interval of 3, suggesting columnar 


transposition. Decimation is not considered. a" a II 


these letters appear in sequence past the midpoiltt 
of tho cipher sequence. Tho significance of thi:-; ''ill 


be dealt with later. Using the VWXYZ cluster <b a 
base, a fragmentary matrix is constntctl>d. 
ONSTU 


FGHJK 
VWXYZ 


(2) The second and third rows show good 
sequential order, while the first suggests a keyword 


fragment. Accepting this koymml frns:ml'ltt. the 
nPxt step is to continue to PX]wnd tlw "l'l[\lc'lltial 
pattern of the seeond and third ro11·..;. T,,,, dtt:-;t,•r,..;. 
("/JQ and EBP. sho\\· a ,..;pqtt<'lltial n·lati111t in thP 
"l'l·ond and third charactors :lllcl an· :tddl·d. 


E C 0 X S T r· 
BDFGHJI\. 
P Q v· w x 1- z 


(3) Again the sequence in till' :'('C••nd <tiHl third 


~""'',.; is good. :\lissing kttor,;. l'Xl"l'J>t t lw I n1td H. 
alrl'ndy npponr in the first nl\1·. Both till' I and R. 


'' ith tlwir assoeiatt•d kttPrs ILl.\[ and I L. nrc 
plnn·cl using the so<pwntial pn t t!'l"ll of t lil'ir a,.;:-;oci- 
ntl'd letters. RAM is placed at thl' ldt, n,..; . t <Lnd 1\1 
pn·cedes Band P; and IL is placl~d to th<· right ns 


tho L follows a K. Note that in the cn:-.l~ of tlw fL. this 


cluster consists of only two letters, a characteristic 


of the extreme right of an incompletl•ly-fil\tod rmttrix. 
Thus the matrix now appears fully rncon•reJ: 
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REGONSTUI 


ABDFGHJKL 


~YPQVWXY Z 


b. Note that this solution differs from the first in 
that a complete cipher sequence is st~died, and no 
correlation of its values to a cipher message is 
required. Given a complete sequenc!3, it is always 
easier to recover the system of generating it than 
to work with only fragments of a sequence. How- 
ever in so doing, some of the value of recovery is 
lost, i.e. it does not aid in the analysis of a message. 
The recovery of a cipher sequence from fragments is 
more difficult but far more rewarding in terms of 
actual us; 


8-8. ~Derivation of a Numeric Key 
a. In those cases where a cipher alphabet is 
generated by keyed columnar transposition, the 
same techniques given above are applicable to the 
recovery of the matrix. The numeric key involved 


is then determined by noting the order in which the 
columns of the matrix appear in the alphabetic 
sequence. For example, observe the relationship 
between the columns of the matrix in figure 8-4 
and the order of their appearance in the alphabetic 
sequence. 


6 
2 
1 
5 
4 7 
8 9 
3 
R 
E c 0 
N s 
T u I 
A 
B 
D F 
G 
H 
J 
K 
L 
M 
p 
Q v w X 
y z 


1 
2 
3 
4 
5 
6 
7 
8 
9 


CDQ EBP IL NGW OFV RAM SHX TJY UKZ 


Figure 8-4 c/. Relation of column order to sequ= order ( U). 


b. Whef1 compared to the straight 
columnar 
sequence, a difference in the location of the CVlLYYZ 


cluster is seen as shown in figure 8-5. 


1 


CD Q 


RAM 


6 


2 
3 
4 
5 
6 
7 
8 
9 
EBPILNGWOFVRAMSHXTJYUKZ 
EBPCDQOFVNGWSHXTJYUKZIL 


2 
1 
5 
4 
7 
8 
9 
-3- 


Figure 8-5 ~Comparison of sequences (U). 


Note that the sequence is now somewhat disturbed, 
but also that the interval between each of the letters 
is still 3. Therefore, by starting the column above 
the base cluster VWXYZ, the same result is obtained. 
The bottom two rows sho\v alphabetic sequence, 
less those letters appearing in the top row as part 
of the keyword. 


8-9. Ulf Recovery of Decimated Sequences 


a. The characteristic which provides the basis 


of analysis and recovery of decimated sequences 


is the cyclic permutations of the letters of the 


sequence imparted to them by the decimation 
process. The characteristic is seen in the examples 


below. 


(1) Where a cipher sequence is derived by a 


count where all letters are used, none excluded, a 


constant interval of its multiple occurs bct\\·cen 


the letters that are adjacent in thr base alphabet. 
For example, in the alphabet below, note that the 


interval is 5 between the letters E-J. 0-T. and 
Y-D. Note also that the interval of 5 is constant 


in reverse, B to A and ('to D, indicating that these 


IPttPrs were taken out of the alphabet in rr\·t;rse 
,,rder and after other letters normally prrcPding 
tfwm. Using the characteristics, the nlphabf't is 
Pasily recovered by counting off the lrtters. thus 
placing them in their original seqll<'ll<'l'. Spaces 
fwt11·rt·n the letters are filled by letters in ,.;equence 


li.S the count is continued. 


Example: EJOTYD INSXCHMRWBGLQVAFKPUZ 
- - 
- 
- 
E - 
- 
- 
- 
J - 
- 
- 
- 
() - 
- - 
- 
T - 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
- 
- 
- D - 
- 
- 
- 
I - 
- 
- - .v - 
- - - s - 
- 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
- 
- 
G etc. 
3 
4 


After all the letters of the cipher sequence are 
counted off, the cycles are compressed into one to 


4 
1 
2 
3 
4 
1 
2 


reform the basic alphabet. 


- 
- 
- 
y 
2 
3 
4 
- 
- 
X 
3 
4 
1 
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(2) In the case where the cipher sequence is 
derived by a count which excluded letters once 
they were used, the same counting system as above 
is used, but the count does not include letters pre- 


viously placed, in effect duplicating the generation 
process. For example using the alphabet below·, the 
count appears: 


CFILORUXAEJNSWBHPVDMYKZTGQ 
C - 
- 
F - 
- 
I 
- 
- 
L - 
- 
0 - 
- 
R - 
- 
U - 
- 
X - 
1 2 
3 
1 2 3 
1 2 3 
1 
2 
3 
1 
2 
3 
1 
2 
3 
1 2 
3 
1 
2 
3 
1 
2 
A 
- 
- 
E - 
- 
J 
- 
- 
N - - s - - w- 
- 
3 
1 
2 3 
1 2 3 
1 2 
3 
1 
2 
3 
1 
2 
3 
1 
2 
B 
3 


The count is continued until the basic alphabet is recovered. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


b. In both examples above, solution is predicated 
on the ability of the analyst to determine the proper 
intervals. In both instances, since a direct standard 
alphabet is used, this interval is easily determined, 
being found as the distance between adjacent letters 
of the base sequence. Where a keyword mixed 


alphabet is used as the base, it may be sorne\\·hat 


more difficult to determine the correct inten·al, 


but not an impossibility. ~ote the characteristics 


of the two segments of the key\\·ord mixed tdphabet 


in figure 8-6. 


Keyword: 
ABSTRACTION 


ABSTRCIONbEFGHJKLMPQUVWXYZ 


Keyword Segment f 
Alphabetic Sequence Segment 


Figure 8-6 (C). Keyword and alphabetic segments, keyword mixed alphabet ( U). 


(1) In the sequence above, the normal alpha- 
betic progression still remains, even though it may 
be missing some of its component letters. The 


UVWXYZ cluster is unchanged. These tv.-o ele- 
ments, particularly the cluster, provide a basis for 


the analyst to determine the internll in the deci- 
mation process. If the alphabet abo\·e is decimated 


at an interval of 4, used letters not recounted. it 
appears as: 


TOFKQXBIGMWSDLYCJZEVNAURPH 


(2) This sequence contains certain patterns 
which are normally different from a decimation of a 
direct standard alphabet. Taking out the first three 
elements of the two decimated alphabets shown 
underlined, which end with a letter of the VWXYZ 


cluster, this pattern can be seen. 


Direct standard sequence decimated at an interval 
of 3: CFILORUX 
AEJNSW 
BHPV 


Keyword mixed sequence decimated at :lll inten·al 


of 4: 


TOFKQX 
BIGMH' 


S D L Y 


(3) In the first set, the alphabetic progression 


is constant at an interval of 3 (C-- F-- I-- L 
etc.). In the second set, the alphabet progre,_;sion is 
not constant nor is it at the same inten·nl. 


T 
0 
F - 
- 
- 
- 
K - 
- 
- 
- 
- 
Q 
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The absence of a constant interval between the letters 
and the lack of alphabetic progression within the 
individual elements indicates that the seqnence is 


derived from a mixed alphabet base. 


(4) Since the recovery of the base alphabet 


depends on determining the decimation interval, 
some means must be used to find this. The simplest 
method is through the use of the UVWXYZ cluster 
letters. Note tlltlt in d1e second decimation process 


illustrated above, the X, H', and Y each mark one 
run-through of the alphabet, i.e. letters are ex- 


tracted at a given interval, in this ca:-;e 4. The first 
letter to be extracted is T, then 0, then K, then ({, 


then X. Then the process starts again ill'01llHl the 


alphabet. The sequence T to X <'ontain,; :-;ix letter,-. 
Six divides into 26, 4 times 11·ith a remainder of 2. 


Therefore, the inten·nl is 4. 


(5) If the assumption of 4 ih the intern!l i,., 


eorrect, when applied to a ,;imilar cipher ,.;eq1ten<'e 


it produees a keyword mixed alphabet. To ill1t,.;trate 


the procedure, note the reeoyer_v ,.;hol\'1\ in figure 


8-7. . 


DBHPXHCKVAEMSOQRJTLZYWIGUE 


5 letters 


- 
d 


- - A 


D 


26 + 5 = 5 + 1 
interval of 5 assumed 


B 
- H- 
c - 
- K 
En etc. 
P----x- 
v - 


Figure 8-7 (C). Recovery of a decimated alphabet ( U). 


Note that the count abo\'e did not include letters 
once placed. If they are included, the sequence 


appears incorrectly as ilh1strated belm1·: 


- 
D - 
- 
- 
- 
N 
-B---- H---- P---- X- 


0 - 
- 
- 
~ K - 
- 
- 
-· V 
alphabetic order reversed 


The count continued, as in the first example above, results in the following alphabet: 


STANDRIZOBCEFGHJKLMPQUVWXY 
Key,vord: STANDARDIZATION 


Section Ill. ~SOLUTION OF UNILITERAL MONO ALPHABETIC MIXED ALPHABET CIPHERS 


8-1 0. (,{System Identification 
a. The first step of cryptanalysis is the identifica- 
tion of the system to which a gi\·en cryptogram or 
series of cryptograms belong. Determination is 


based on certain characteristics imparted to the 
ciphertext by the method of encipherment. In 
the case of uniliteral monoalphabetic substitution, 


identification is u,;nully easy, ba,.;ed <>II tl:<' 'lu1tial 
relationship of peaks and trough,; of tl1c 11<•1'11\;t! :ttHl 


the cipher distributions. ·where they 
'<~llll•.t be 
matched, the logical assumption i,.; tl1nt 
:1 
1111Wd 


cipher alphabet is used. For example. the f1·eq•1ency 


distribution of the ciphertext of the f"l\"''·ing 
message appears as: 


AAAAQ QFFQU PKRTT SWZRG 
QFNWD AERL:V wn.tsw 


DAFA() ADDAK OADGR GZRGJ RURGR 
FMA.YC n .I 1:· F 11 


AQVEE WJWGE RLEWJ WGEFA Hi11A I D 
D WZ R 0 
WG F !\ /,' 


TTEHW QDGWQ VQFFQ UPEFA. HVRJR ERAGU 
.·1 () (I (j (; 


VAXXA 
IDFCV RJRER AGKRT T SlVO A JWVXD 
.lO[.l!.\ 


EEDAQ VEFCD WWNWD 
AFCDW WFADA QVYIG 
C F U .\(; 
WRZCF EWJWG ERLEF AHAGW AGWDW ZRO:VG 
F R E 1· H 


JRERA GDWEW DJWXY AAAAQ 


(1) Note that lll compiling the frequency 
are not used, as they are system indicator,.,. 


distribution, the first and last groups of the text 
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~~ 
~ 
~ 


~ 
~ 
~ 


~ 
~ 
~ 
~ 
~ 
~~~~ 
-~ 
~ 
$ ~ ~ ~ 
= ~ ~ -= 
~- 
~ =- 
A B C 
~-~ ~~ =~ =-~~= $ ~=~~~ ~~-~ 
DE F GHIJKLMNOP Q RSTUV WXYZ 


30 0 4 22 21 18 19 4 3 9 4 3 2 5 8 2 11 26 2 6 7 9 30 6 1 5 


Figure 8-8 (U). Uniliteral frequency distribution, mixed rnonoalphabetic substitution (C). 


(2) The pronounced peaks and troughs of the 
distribution shown in figure 8-8 are characteristic 
of uniliteral monoalphabetic substitution. If it is 


nonmonoalphabetic, it appears flattened. Further. 


the difference in spatial relationship of the peaks and 


troughs between this distribution and a normal 
distribution indicates that a mixed cipher sequence 
is used. 
b. In this particular example, visual examination 
suffices to show that the system in use is probably 
monoalphabetic and uniliteral. This is euused by 
repeated occurrences of plaintext values which are 


duplicated in the ciphertext, only in different terms 
and easily revealed by the frequency distribution. 
This phenomenon is not always so evident. When 
such ev dence is not at hand, the analyst must use 
other statistical tools to aid in the identification of 
a system. 
~1oreover, the analyst may use these 
tools to further substantiate his identification made 
by visual inspection. 


8-11 . (dl Statistical ldentiAcation 


a. sele~al statistical tests are available for the 
identification of a system where the uniliteral fre- 
quency distribution does not reveal significant char- 


acteristics, either because of the shortness of the 
message, or because of the lack of internal charac- 


teristics in the plaintext. For short messages, in 
particular less than 200 letters, the expected fre- 
quency table will aid in the classification of a cryp- 


togram as either substitution or transposition, and 
the Lambda (A.) or blank expectation test provides 
a means of identifying a substitution system as 


either monoalphabetic or nonmonoalphabetic. These 
tests given as tables are contained in paragraph 
2-12 and their use explained in detail. 
b. In addition to the tests above, the Phi (ct>) 


test is also used to determine whether a given cipher 
is monoalphabetic or nonmonoalphabetic. The Phi 


test is a test of the observed occurrence of a given 
letter as contrasted to its expected random occur- 
rence ·and its expected plaintext, or normal occur- 
rence. The details of operation of the test are 
contained in paragraph 2-15. 


c. An alternate way of testing whether 1t crypto- 


gram is monoalphubetic is by determining- the Phi 


Index of Coincidence (</> I.C.). The 1> I.C. i,- the 
ratio of the number of obser;-ed ncl'tl!Tence,.; i cpo 1 to 


the number of ex pee ted random occnrrence,.; ( cpr 1. 
Shown in formula the 1> I.C. nppenrs ns: 


ct> I. C.= cpo 
<j>r 


Actually this method nsed the same ntlue,; n,; the 
Phi text, only expressing their rei<ttionships ,.;ome- 
what differently. That is, the cp I.C. gi,·e,;, in term,.; 


of a ratio, the nearness of cpo to cpr. For example. 


the values given in paragraph 2-15 for <j>o, cpr. and 
ct>p are: · 
Observed occurrence 
Expected random 
Expected plain 


cpo= 15-t 


<j>r = 94 


ct>p = 16-t 


In terms of the cp I. C. the ratio of <j>o to </>p is: 


L54 
ct> I.C.=~=l.6-t 
94 


The greater the value of the cp I.C. the ,.;trnn~er the 
indications of mononlplwbeticity <tre. To illu,.;tra t e 


this, consider the case \\·here cpo a ml <j>r are equal: 


<j>o=lOO 
.., 
100 
cp I. C.= ~ = 1.00 
cpp= 100 
100 


d. The theoretical cp I.C. of English plaintext 1s 


·0667 equaling 1.73, and the I.C. of random text 1s 
.0385 


·0385 
[' 
0 'l'l 
l 
l 
. 
d 
-- eqna mg 1.0 . 
1ese nt ue,; are c eternune 
.0385 
. 


by the fact that .0385 and .0667 are re,.;pecti\·ely 


the random constant and the plain constant of 


English in decimal terms. As nniliteral monoalpha- 


betic substitution does not ehange the relative ntlne 


of occurrence of letters of the plaintext but only 


their nlphabetie identification. the cp I.C. can be used 


for determining the monoalphnbetic or nonmono- 


alphabetic llltture of the system. Thus, the cp I.C. 
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of the cryptogram being examined, 1.64, can be 
compared to the cp I.C. of plaintext, 1.73, and random, 


1.00. As it approximates the c/J I.C. of English plain- 
text, the system is assumed to be monoalphabetic. 
If the cp I.C. of a cryptogram closely approaches the 


c/J I.C. of random text, we assume that the system is 
nonmonoalphabetic·. The degree of approach is a 


a matter of the cryptanalyst's judgment. 


8-12. ~Preparation for Analysis 
a. As a preliminary step to analysis of any 
cryptogram, the analyst should organize his work. 
Given a cryptogram to analyze, a work sheet is 
prepared. This need not be elaborate, but is in a 
format that lends itself to study and one which can 
be kept and used as a record of the solution, the 
actual work being performed on similar sheets. 
.Also as an adjunct to the work sheet, the analyst 
keeps a technical summary of the solution explaining 
in some detail the steps followed and their success 
in obtaining a final solution. This is especially 


important in the case of solutions of new systems, 
and in those instances where another analyst is 
expected to use the result produced. Although there 
is no specific format for either the example given 
below and those in following paragraphs, they serve 
as models. 
b. The cryptogram for analysis is copied on a 


work sheet of 7,4-inch cross-section paper. If copied 
by hand, the writing is in ink and each letter is in 
accordance with the standard military 
printin~ 


system. In the case of monoalphabetic unilitera I 


ciphers, the message is copied as individual letters, 
regardless of the groupings of the message text, one 
letter to a cell with a space between each. To aid 
in the references to a particular letter, ro,,· and 
column coordinates may be assigned. Horizontal 
lines may be identified by capital letters and vertical 
rows by numbers. Thus, Al equates to the first 
letter of the cryptogram, row A, column 1. This 
format is shown in figure 8-9. 


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 


A 
QFFQUPKRT T s w z R 
G Q 
F 
ll w D 
B 
AERLNWDAII w D A 
F 
A 
0 
A 
D 
D A 
K 
c 
OADGRGZRG J 
R u R 
G R 
F 
f.1 
A 
X u 
D 
DAEEDAQVE E w J w G E 
R 
L 
E w J 
E 
WGEFAHNAI D 
D w z R 
0 w G F 
K 
R 
F 
TTEHWQDGW Q v Q F 
F 
Q u p 
E.F A 
G 
HVRJRERAG u A 
0 
0 
Q G v A 
X 
X 
A 
H 
IDFCVRJRE R 
A 
G K 
R 
T 
T s w 0 
A 
I 
JWVXDAOUD A 
E 
E 
D 
A 
Q v E 
F c D 
J 
WWllWDAFCD w w F 
A 
D A 
Q v y 
I 
G 
K 
UFRAGWRZC F 
E w J w G E 
R 
L 
E 
F 
L 
AHAGWAGWD w z R 
0 
N 
G 
F 
R 
E v R 
H 
JRERAGDWE w D J w X 
y 


Figure 8-9 ~ 
Ciphertext work sheet ( U). 


c. After the work sheet is prepared, the text is 
closely examined for repetitions within the text. 


Such repetitions, a characteristic of monoalphabetic 
substitution, are indications of identical words or 
expressions in the underlying plaintext and prove 


to be extremely useful in the assumption of letters 
and whole words. The search normally begins for 
digraphic and trigraphic repetitions, these being 


easiest to locate. They are further examined for 
possible extension of repetitions of greater length. 
In the search, note any reversible repetitions. As 
the repetitions are found, underscore them indicating 
the direction of progression of reversible digraphs 


by an arrowhead. Properly marked, the work sheet 
appears as in figure 8-10 . 
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1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 


A 
QFFQVPKRT 
'1' s w 
B 
A E R L N W D A il w D A 
c 
OADGRGZRG J 
R v 
D 
DAEEDAQVE E w J 
E 
WGEFAHNAI D 
D 
w 
F 
T T E H·w Q D G W Q v Q 
G 
JlVRJRERAG v A 
0 


H 
IDFCVRJRE R 
A 
G 
I 
JWVXDAOVD A 
E 
E 
J 
WWllWDAFC"'j)W w F 
K 
V F R A G W R Z C 
F 
E w 
L 
AHAGWAGr.lD 
~I 
ry 
R 
i.J 
H 
JRERAGDWE w 
D .J 


'7 
R 
G 
i.J - 
!LL 


F 
A 
0 
A 
D 
R 
G 
R 
we E 
F 
l1 


R L 
W G 
u p 


L: 
R 
0 


F 
F 
Q 


0 
Q G 
K 
R 
m 
... 


D A 
Q 


V 
A 
T S 
v 
I::: 
AD" A 
Q v 


.. 
... 
E R 
J 
rJ 
r! 


0 
N 
(j 
-- 
F 
R 
w 
X 
y 


D 
K 
u 
J 
R 
A 
A 
A 
j) 


N 
W 
D 
A 
A X 


E"W 


F K 
E F 
X X 
w 0 


F C 


y 
I 
G 
E F 


V 
R 
L 
E 


Figure 8-10 r· Ciphertext prepared for analysis (U). 


8-13. ~literal and Triliteral Frequency Dis- 
(3) Each letter may be :Im>m "ith it< pmcding 
tnbcmon 
and succeedmg letters, a tnhteral d1stnbut.wn \nth 
· a. In order to study and make use of the repeated 
one prefix and one suffix. 
patterns underscored, a frequency distribution of 
b. For the study of monoalphubetic eiphl•r,, the 


digraphs and trigraphs may be made. Properly 
last method is most satisfactory and ,,·ill be u,;ed 
compiled, this data provides a base for comparison 
here. In its construction, it is quite simple. Aero,;,.; 


of repeats in the ciphertext against similar digraphs 
the bottom of a sheet of eros,; section paper. a ciplwr 


and trigraphs which occur in English plaintext, 
alphabet is inscrjbed in its normal order. Abon• 


and \\'hich also aids in the identification of VO\\·els 
each letter, arranged in columns. thP letter,.; '' hieh 
and consonants. Basically there are three methods 
precede ahd succeed it in the ciphertext are entered. 


of compiling this data. 
The paired letters then repn•sent the prt'fix and 


suffix, in that order, of the letter tlwv an• inscribed 
abon•. Belo,,- the horizontal alphabet. in pnn•nthPSl'S 


is the frequency ntlue of thut kttl'l'. thl' ,;nme ntlues 


that appear in tlw uniliteral fn•quency distribution. 
An Pxample of this method of eonstructing a tri- 
literal frequt>ncy distribution using the ei\Jhl'I'tt>xt 


is shown in figure 8-11. 


(1) Each letter of the ciphertext may b<' shmn1 


with its t\\·o preceding letters, a triliteral distribution 


with two prefixes. 
(2) Each letter may be sho\\·n \Yith its t\m 


succeeding letters, a triliteral distribution with 


two suffixes. 
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(30) (0) (4) (22) (21) (18) (1J) (4) (3) (9) (4) (3) (2) ([j) (8) (2) (11) (26') (2) (6) (?) (9) (30) (6) (1) (5) 


A 
!' 
c 
D 
E 
F 
G 
H 
I 
J 
K 
L 
M 
N 
0 
p 
Q 
R 
s 
T 
u 
v w 
X 
y 
z 


DE 
FV 
WA 
AR 
QF 
RQ 
AM 
AD 
GR 
PR 
REJ' 
FA 
FW 
AA 
UK 
-F 
KT 
TW 
RT 
QP a sz 
AU 
VI 
WR 
WA 
RN 
FU 
ZG 
~·iu 


D'' ,, 
FD 
WA 
AE 
FQ 
!JR 
E'W 
AD 
ww 
AO 
RE 
HA 
LW 
KA 
UE 
GF 
EL 
TW 
TS 
RR 
QQ 
liu 
AX 
:JP. 
DF 
QJI 
hW 
HR 
AV 


FO 
FD 
AD 
ED 
AA 
RZ 
AV 
YG 
ww 
FR 
ww 
RW 
AV 
RT 
XD 
Gh 
iW 
XA 
"'" 
GG 
i:,J 
OD 
lF 
DA 
VE 
PJJ 
RJ 
AA 
RR 
GR 
OG 
AO 
WD 
ZG 
TE 
QP 
CR 
JG 
Vi.! 
:.?.C 


DK 
CD 
OD 
AG 
EW 
i:,)l 
RR 
P.R 
OG 
wv 
Ju 
R'.f 
Ch 
wx 
tJ 
"'Y 
"'ii 
UG 
OG 
!:X 
VA 
GR 
GK 
WJ:,' 
AW 
WA 
VF 
GF 
TS 
OD 
(i.8 
JG 
X- 
DE 
EA 
LW 
QF 
WE 
ww 
AU 
FU 
EL 
CF 
QY 
DZ 


DQ 
ID 
GF 
FQ 
WF 
RR 
RN 
OG 
zo 
ER 
OG 


FH 
DW 
TH 
EA 
D~' 
Dr/ 
AV 
KT 
HQ 


f.1I 
QG 
PF 
DC 
AU 
AV 
VJ 
GQ 
FH 
IF 
RR 
E:C 
QV 
J];,' 
so 
RG 
XA 
RR 
AC 
AK 
EA 
JV 
uo 
VA 
AE 
WA 
IV 
VJ 
DW 
vx 
EA 
ED 
UR 
AW 
JE 
Wll 
XI 
CW 
VF 
CE 
r!E 
EA 
i/D 
RG 
WA 
FW 
EA 
AW 
lG 
w 
OJ 
cw 
GR 
GR 
AW 
FA 
WF 
DO 
AA 
LG 
wz 
AV 
DE 
ww 
RV 
WF 
EL 
GR 
DQ 
GW 
P.R 
AD 
zo 
];,J 


DF. 
WJ 
ww 
FE 
JG 


FD 
VJ 
GA 
DQ 
JE 
Gi:J 


RG 
EA 
i.;Z 


FH 
VE 


HG 
OG 
we 
ED 


RG 


Figure 8-11 'Triliteral frequency distribution ( U). 


JX 


c. The met hod nsed in fignre 8-11 constructing 
the triliternl frequency distribution proYides a com- 
plete list of all trigraphs and all digraphs in the 
cryptogram. Using the table, repented trigraphs and 
digraphs can be quickly isolated. In studying the 
digraphs, it is immaterial whether prefix and base 


letter, or base letter and suffix, is used, as long as the 
same pnir 's used consistently. For exnmple, the 
digrnphs IJ.l, R.l, and F.l nre found using prefix and 
base letter .1; the same digraph can be found ,,·hen 


base letter !J, R, nnd F are combined with their 
suffixes. 
d. From the triliteral frequency distribution, 


fignre 8-11, the analyst can extract a listing of those 


elements most frequently repeated in order to deYelop 
u condensed table of repetitions. This table should 


also include \Yord-length repeats fonncl in the initial 


examination of the text. The purpo"e of nwki11g a 
condensed table of repetitions is to limit the ,;tnd_,. 


to those items of the greatest probable inlpnrtnll<'e. 
Therefore in 
thi~ table, a,; :tll arbitrary nt!e fDr 
mes,;uges of a\·erage length. di~rnph" and trigr:lph:-- 
"·hieh oeem· les~ than fm1r aml three times re:--pe<·- 
tiYely need not be li~ted. At the option of the :tll:tl.'·"t. 
digraphs of repeated letter~. regardle~~ of llllmher of 
repetitions, may be listed. Follo11·ing each item listed. 
the freq11eney of it,; ocenrrenee shonld nl,.;n be 
inelnded. Figure ~-12 follo11·ing, is an example of a 
condensed table of repetitions dnl\nl from the t ri- 


literal frequeney distribution nbln·e and the me~~age 


text. 


8-12 
enNI!'IB~NTIAI 


.CONFIDENTIAL 


DIGRAPHS 


DA-ll 
FA-5 
RA-4 


00-1 


TRIGRAPHS 


RAG-4 
FAH-3 
DAQ-3 
DAE-3 


POLYGRAPHS 


VRJREPAG-3 
WJWGE-3 


WD-G 


AQ-3 


WDA-4 
ERA-3 
JRE-3 
VRJ-3 


RE-4 
EE-3 


i:,R-6 


ZR-4 


RER-3 
ERL-3 
KRT-3 
EFA-3 


QFFQUP-2 
DAQV-3 


tF-4 


FF-2 


T1'-3 


RTT-3 


AGI·/-3 
r/GE-3 


RJR-3 


AG-6 
WG-5 


DW-5 
JW-5 


l:,"Y/-4 


NW-4 
GW-4 


WJW-3 


NWD-4 


EWJ-3 
AQV-3 


ivWDA-4 


Figure 8-12 yr. Condensed table of tepetitions ( U). 


8-14. j.e{' Analysis of Vowel-Consonant Rela- 


tionship 
a. By applying certain known characteristics to 
the elements previously isolated, it is possible to 
classify the high-frequency cipher letters into t\\·o 


groups, probable consonants and probable YO\Yels. 


This classification in turn permits the assumption 
of plaintext ,-alues for those elements, ,·alues "·hich 


then can be substituted for ciphertext in the cryp- 


togram. The basis for this classification is quite 
simple. The manner in \\·hich VO\Yels and consonants 
combine with each other and among themseh-es i,; 


different in each case, and they combine ,,·ith 


characteristic frequency. An example of these char- 
acteristic frequencies is seen in the tables of eli- 


graphic frequencies in appendix A. Examination 
shows that the 18 digraphs representing 25 percent 
of all digraphs are composed of the letters: 


ETNROAISDHV 


With the exception of the H and the V, the norm~d 


high-frequency \"owels and consonants will account 


for approximately two-thirds of the cryptogram 
above although they represent only a little more 
than one-third of the alphabet. 
b. Further examination reveals that of the 18 
digraphs, 9 contain an E, three of which are reversed. 


ED EN 


NE 
ER 
RE 


ES 
SE. TE 
VE 


Of the remaining nine digraphs. fh·e contain an X. 
four contain aT, four nre a consonant combination, 


and none are combination,; of ,-oweb. 


A~ 
ST 


I~ 
TH 


ON 
TO 
~D 
OR 
NT 


Of the \"0\\·els, E combines most rendil.\·. and then 


\\"ith the ~. R, S, T, D. nnd V in that order. X 
('ombine,; mo,;t readily with the ,-m,·els. specifi('ally 
with E. 0, I, and A. in that mder. The <·on,.;on<lllt 


T <·nmbine,; mo,;t readily ,,-ith other <"OII,;otwnt,.;. 


the X, H, and S, in that order. Therefore. if se,·ernl 
high-frequency cipher letter,; are oh,.;etYetl ('()ll\bin- 


ing \Yith one letter, the assumed ndue of Ep. they 
may be assnmed to be the equin1lents of ~. R, S. 


and T. D and V wonld be lo,\·-frequetH',:'-. combina- 


tions. Tho,;e cipher letter::; a,;sumed to be eonsonnnts 
should be observed in combination \\·ith another 


~roup of high-frequency eipher let,ters representing 


the nm·els, A, I, and 0. Generally YO\\·el eombina- 


tions nre limited and ,;hould not be obsen·ed in 
combination with any great frequency. But. certain 


diph tho'lgs may appear in the text, and since the 
digraphs are drawn from the ciphertext in sequential 


order, any one rnny represent a \\·orcl bridge thereby 
forming a VO\Yel combination. For example, the 


- t:nNI=IAI=NTIAI 
"' 
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following phrase enciphered, results 
in_~ l!:!L_§O 


combination: 
SHIFT FIRE ON SCHEDULE 
EO Digraph 


c. To apply the foregoing principles, the analyst 
will use the uniliteral frequency distribution, the 
triliteral frequency distribution, and: the condensed 
table of repetitions. Only after all the high-frequency 
cipher letters and combinations contained therein 
are studied \\·ill any deduced values be applied to the 
cryptogram. The first step then is to list the high- 
frequency cipher letters of the cryptogram using the 
uniliteral frequency distribution previously prepared. 


Prefix: 
% 


A W R D E G F Q J V 


3 
3 
2 
2 
2 
1 
1 
1 9 
9 


0 
0 
6 
2 
1 
9 
8 
1 


By their frequency of occurrence, the cipher letters 


probably represent the plaintext letters: 


E T 
N 
R 0 
A I 


Q 
•:l 
D 
H 


On the basis of frequency, both .lc and We are 
equally good dwices for Ep. By using the triliteral 


frequency distribution, the combinations of these 
letters can be written out for eonsidemtion, using the 


follo,,·ing format depicted in figure B-13 "·hich sho,,·s 


both combinations and frequencies. 


~ ~ 
. 
A a 
ABCDEFGHIJKLMNOPQRS 


---~---- 
-- 
- 
TUVWXYZ 
--- -- 
- 
- 
. 
-- 
- 
- 
- 
Suffix: 


Prefix: 


~ =- 
~ 
Wa 
A B C D E F G H I J K L M N 0 P Q R S 1' 
:::::c--- 
U V W X Y Z 
:;=:- 
- 
--- 
- 
- 


Suffix: 


Figure 8-13 (C). Vowel consonant relationships (U). 


Of the two sets of combinations, that of We "·ith 


De, Ec, Gc, and Jc seems more suggestiYe uf Ep 


combining with Np, Rp, Sp, and Tp to form the 
reversible digraphs noted in preceding paragraphs 


than does the possible combinations exhibited by .le. 


For this reason, the choice of U'e as Ep is assumed. 


If in the course of further study this assumption 
proves incorrect, the A.c value will be assumed to be 
Ep and the data studied in that light. 
rl. If We is Ep, it follows that De, Ec, Gc, and Je 


represent consonants. And, if this i,;; correct. they 
should be found in combination "·ith other high- 


frequency letters which represent the ,.o"·eb A. I. 0. 


and U. Using the condensed table of repetitions, 


these letters are seen as combining readily "·ith .lc 
and Re and less readily "·ith the cipher letters Se. 


Fe, nnd Oe. The eipher letters .l and R pro ba bl~· 


represent the cipher equi\·alents for t\\·o of the plain- 


text vowels A, I, 0, and U. The letters Xe. Fe. and 


Qc probably represent consonants. 


Vowels 


WAR 


(E) 


Consonants Possible Consonants 
cipher 
assumed plain 
DEGJ 
NFQ 


(1) Further identification of vowels can be made on the basis of the occurrence of dipthongs. The table 
of digraphs shows that the most frequently used dipthongs are: 


dipthongs: 
IO 
OU EA 
EI 
AI 
IE 
AU EO AY UE 


frequency: 
41 
37 
35 
27 
17 
13 
13 
12 
12 
11 


Referring to figure 8-12, the digraph RAe appears 


quite frequently. Ac aiHl Rc being assumed VO\\"f'b, 


the RA combination should represent a diphthong, 
and by frequency of occurrence the diphthong IO 


is suggested. The frequencies of the individual 


letters, Rc and Ac are such that they correspond to 


tlw f'Xpectf'd fr<'quPney of Ip and Op. Thu,; tlH' 


plaintext values of I and 0 an' nssignl'd to He nnd 


Ae respectively. 
(2) Returning to the suspect consonants. it i,; 
noted that the cipher letters D, E, G, and J eombitH' 
well \\'ith the assumed Ep (H'c) suggesting that tlwy 
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represent four of the plain consonants N, R, S, T, 
and V. The frequency of combination of those 
letters is as follows: 


RE 
TE 
NE 


VE 
SE 


(98) 
(7) 
(57) 
(57) 
(49) 


ER 
ET 
EN 


EV 
ES 


(87) 
(37) 


(11lj 
(20) 


(54) 


Study of prior tabulations reveals that We (Ep) 
combines with D, E, G, and J cipher as shO\nl in 
figure 8-14. 


Prefix: 


We (Ep) 


Suffix: 


~-=$ 
jEG~ 


Figure 8-14 (C). Analysis of We as Ep (U). 


De, as the most frequent combination \Yith u·e. lS 


accepted tentatively as Rp. The Ee combination is 


noncommittal but the Ge also shows a good reYersa I 
pattern, similar to the NE-EN reversal. Fnrther, 


the trigraph RAG is noted on the condensed table 
of repetitions as being of relatively high frequency. 
By previously assumed values, this trigraph equates 
to ION if Gc=Np. Referring to figure 8-12, the 
RAGe is seen as a \vord ending occurring three times. 


each time preceded by Ee. The plaintext trigraph 


ION is one of the most common trigraphs and is 


usually preceded by T or S, the T being more com- 
mon. Thus Ec likely represents either T or S plain- 


Ec = Sp and Fe= Tp 


text. The preceding table of combinations shows 
that the value of combinations of E with S and T 


are almost equal. Both are equally good doublc'ts, 


i.e. TT or SS. Therefore, since tho evidence is 
inconclw>ive for the moment, the Ec is not considered 
further. 
e. The cipher letter F is the next to be examined. 
In tho condensed table it is observed a~ appearing 
in combination with Ec, either Sp or Tp as EFe, and 


in combination with itself as a doublet FFe. Al- 


though the F ha~.;; a high frequency ( 18) thP lattPr 
appearance casts doubt on its being a vowel. V owe Is 


as doublets have the following frequencies: 


AA 
EE 
II 


00 


uu 
yy 


3 
42 


6 


The assumed cipher values for Ap and Ep exclude 
t\\·o possibilities, and th!' expectPd frequency of tlH• 
00 doublet is so low that it mntld hardly fit the 
numbPr of occurrences of the doublet FPc. ThneforP 


Fe is assumed to b!' a consonant. ThP high-frpq uency 


consonants appear as doublets with a frequ!'ncy of: 


TT 19 
NN 8 
RR 11 


ss 19 
DD 8 
HH 0 


.vv 0 


Considering the foregoing freqnencie,.;. it i,.; ob\·iou,.; 


that Fe can also equal Sp or Tp. giYing ri,.;p to sPn'ral 
possible combinations with Ee. \\·hieh al,.;o can lw 
Pitlwr Sp or Tp. 


Ec 
thus 
EFc = STp = 
or thus 
FFc = TTp 


= Tp and Fe = Sp 
TSp 
EFe 
FFe 
EEc = 


SSp 


TTp 
EEc =SSp 


Faced with this choice where the frequency "f 


occurrence within the cryptogram is equal. 
<>lw 


other possibility is open for use in identifying t h•· 


correct plain-to-cipher equation. This is done by 


checking the relative plaintext occurrences of tlw 


digraphs ST and TS. The digraphic frequency 


table figure 8-1, shows that TS has a frequency 


1·altw of 19 \Yhile the value of ST i,.; 63. Ther!'forP, 


t h<· first combination abovP, \\·ht'r<' EFc = ::)Tp. and 


11 lwrP Ee = Sp and Fe = Tp may be aeceptl'd. 


8-15. (~ Analysis of Word Pattern 


11. To this point tlw follo\\·ing ,-alne,.; huH bet>n 
assumed: 


p 
c 
ABCDEFGHI J K L .\I ); 0 P Q R S T U V W X Y Z 
W 
R 


The analyst could, using the same 
techniques 
described, continue the identification of single letters 
by combining the recovered values of cipher letters 
with 1.mrecovered cipher letters, playing the resultant 
frequency of the digraphs against those listed in 
the appropriate frequency tables. However, there 


G A 
DE F 


is another method of establishing the identification 
of individual letters. This is through ·tlw use of 


word patterns and the probable \\·onl mPthod. 


b. In foregoing paragraphs, stPrPotypes in military 


communications are mentioned. Tlwse are n•rtain 


words, phrases, and abbreviations occurring \\·ith 
CONFID!:NTIAL 
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regularity. Not only do certain words appear with 
a greater frequency than others, but also certain 


words exhibit specific characteristics of pattern and 


letter usage which are useful to the analyst. ConsidN 


the following words: 


OCCUPY 
LOSSES 


BATTALION 


COM~IANDING 


DEFENSE 


Each is composed of certain letters which occur m 


AA 
ABBA 


patterned regularity, certain letters being repeated. 
This phenomenon, called idiomorphism, provides a 


means whereby certain words are readily identified 


and their plain letter values assumed. As a means of 
deciphering idiomorphic patterns and dassifying 


them, a literal symbol is assigned to the first letter 
of a distinctive pattern and to each succeeding 


different letter. For example, the words above are 


classified as: 


AABA 


0 
CO 
UPY 
ABACDA 


D 
EFENSE 


B 
ATTA 
LION 
AABCDEC 
LO 
SSES 


CO MMANDIN 
G 


Note that the letters A, B, C, D, E, etc. are assigned 
beginning with the first repeated letter of the word. 
Each. time the word letter is repeated, the same 
pattern letter is also repeated. As can be observed 


in the foregoing examples, patterns span repeated 
letters in the word. 
c. The same system of classification is applied to 
cipher repeats that occur in monoalphabetie ,;nb- 


stitution. For example, the polygraphs contained 
in the condensed table of repetitions are classified 
into the following 
idiomorphic classes: 


ABACA 


V RJRER .A.S 


ABA 
WJWGE 


ABBA 
QFFQ UP 
ABCD 
DAQU 


ABCD 
NWD.·t 


There are two general ways that these word patterns 


are used: 
(1) In those cases where no cipher-to-plain 


values have been recovered, the analyst assumes 


that a specific pattern is a given word. This process 
i,; in reality only a form of guessing, the ('OITectnes,.; 


of the guess being directly related to the ltnaly . ..;t',; 


farnilurity \Yith the general <'ir<'nmstances "ltrrottnd- 
ing the message and the geneml nature of it" •·on- 


tents. The use of this method may or may not be 
helpful. Where a word is assumed, ,-,dues <·an he 
assumed which can be applied to other probable 
,,·ords, each in turn generating ne,,· \·alues. In .-;orne 
cases however, this method involves more time and 


effort than a straightforward analytic approach. 


(2) The second case involves the use of thi,.; 
. 
. 


method in conjunction with other normal ana lyt i(· 
approaches. Specifically, the value,.; derind from a 
study of vowel-consonant relationships Me applied. 


in most eases, to word pattet·n,.; thu,.; 
pro,·idin~ a 


firmer base for the assumption of probable ,,·orcb. 
For example, the cipher polygmph,.; pre(·edinp: are 


reduced to partial plaintext as folio''"": 


Idiomorphic class: 
ABACA 
ABBA 


QFFQUP 
-TT-- 
Cipher: 
V R J HE U .t G 
-- 
-------- 


Plaintext: 
I-I~I 00r 


(3) The analyst, by referring to the listing of 


idiomorphic word patterns in appendix D-3, can 


search the appropriate class for \Vords which contain 


the correct plaintext elements. In doing this, remem- 
ber that the elements dealt \vith here are word 


patterns and not lengths. The pattern derived from 
an examination of the ciphertext may represent either 
a complete \Vord, a word fragment, or even parts of 
two adjacent words used in the plaintext. Scanning 
the word list of idiomorphic pattern ABACA, only 
one word is found within this class that contains the 
correct i>laintext values. 


(' 


p 


VRJRER-AG 
-I-ISION 
DIVISION 


In the case of the idiomorphic pnt tem .\.BBc\., 
,e,·erul possible words \Yhich ('oil form to the require- 
ment:-; are found. 


C 
(JFFQCP 
---------··--- 
P 
TT 
ATTACH 


ATTACK 


Although each word is different, they both contain 


the repeated A. Therefore Qc can be equated to Ap. 
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d. By transferring the new plaintext values with 
their associated cipher values, the enciphering 
sequence is now expanded to: 


P 
ABCDEFGHI JKL:.V1NOPQRSTUVWXYZ 


C 
Q 
VW 
R 
GA 
DEF 
J 


8-16. (C) Substituting Deduced Value-; 
At this point, the analyst may choose one of four 
possible routes toward a final solution, or may use 


any combination of these routes. 
(1) Continue a study of word patterns. 
(2) Revert to a study of digraphs. 
(3) Attempt to reconstruct the alphabet above 


using its obvious sequences to assume letter values 
and then checking them by (1) and (2) above. 
(4) Begin substituting the plaintext values now 


recovered for the appropriate ciphertext values in 
the message and then attempting to find additional 


values by reading out valid plaintext. 


a. Thus far the values accepted as being correct 


are almost purely hypothetical. They have been 
tested against one another in combintttions di\·ot-c<'d 


from their context in the message. :\o matter ho\Y 


valid any of the values may seem to be, the final test 
of their validity lies in their consistent application to 
the ciphertext to produce intelligible plaintext. As 
an aid, the analyst may rearrange the cipher-to- 


plaintext relationship to prodnce a deciphering 
alphabet to decipher the message. This, and the 
partially recovered plaintext is shown in figure /-l-15. 


C 
A B C D E F G H I J K L M N 0 P Q R S 1.' U V W X Y Z 
P 
0 
RSTN 
V 
AI 
DE 


1 2 3 4 5 6 7 8 9 10 11 12 13 1l+ 15 16 17 18 19 20 


A 


B 


c 


D 


E 


F 


G 


H 


I 


J 


K 


L 


r-1 


QFFQUPKRT 


AT T A 
I 
AERLNWDAll 


OSI 
ERO 
OADGRGZRG 
ORNIU 
I:r 
DAEEDAQVE.' 


R 0 S S R 0 A D S 
WGEFAllUAI 


E IJ S T 0 
0 


TTEHWQDGW 


S 
E A R 
E 


HVRJRERAG 


D I V I S I 0 N 
IDF.CVRJRE 


RT 
DIVIS 
JWVXDAOJJD 
V E D 
R 0 
R 


Wr/NWDAFCD 


E E 
E R 0 T 
R 


UFRAGWRZC 


T I 0 II E I 


AHAG~IAGJiD 
0 
0 N E 0 N E R 
JRERAGDWE 


V I S I 0 N R E S 


T 
S 
W Z 


E 
W D A F 
E 
R 
0 
T 
J 
R U R 


V 
I 
I 


E w J 
r-1 


s 
D 
R 
Q 
A 
u 


E 
D 
R v 
D 
A 


0 


R 
A 
I 
0 


v 
w 
E 
Q 
A 


0 


G 


l"[ 


A 
E E 
s s 
W F 


'I' 


E z 


F 
T 


0 


L 


D 
R 
A 


0 


0 
I-I 


E 


p 


E 


!!,' w J 
T 
w 
E 
w 
E 


s 


'7 
'-' 


D 
P. 


E 
R 
I 
J v 


v 


0 


~I 


E 


R 
I 
A 


0 


G 


N 


G 


~1 


R 
I 
F 
T 
Q 
A 
R 
I 
A 


0 


D 
R w 
E w 
E 
X 


G Q F N 


H 
A 
T 


0 
A 
D 
D 


0 
R 
R 
R F M A 
I 
T 
0 
E R L E 


S 
I 
S 
0 
~1 
G 
F 
E 
:i T 
Q U P E 
A 
S 


G 
V 
A 
X 


N 
D 
0 


T 
T 
S 
W 


Q V E F 
A D S 
T 
A 
Q 
V 
Y 


0 
A 
D 
G E R L 


N 
S 
I 
G F R E 


H 
T 
I 
S 


y 


Figure 8-15 (C). Partially recovered plaintext ( U). 


CON Fl DENTIAL 


w 
E 
A 


0 


X 


w 


E 


K 


F 
T 


X 


0 


c 


I 


E 


s v 
D 


n 
u 


P. 
K 


u 


J 
v 


~q 


I 
A 


0 


A 


0 
A 


D 


R 
G 


n 


F 
T 
R 
I 
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b. Examination o£ the partially recovered plain- 


text nG ,, reveals several sequences which, although 
incomplete, wntain a suffi-cient number. of key letters 
to make the identification of the <;>thers relatively 


simple. These newly assumed letters may then be 
substituted for other cipher letters. For example, 
the sequence Al through C 17 probably reads: 


"ATTACK WILLBE~IN AT ZERO SIX ZERO ZERO 
TOMORROW 'MORNING" 


From this sequence the cipher-to-plain value can be drawn: 
C 
UP K X S Z N·~·O 
P 
C K W L B G .. z :X M 


The deciphering alphabet now appears as: 
' 
C 
ABODEFG HIJKLMNOPQRSTUVWXYZ 
P 
0 
R S T N P 
W X 
Z M K A I B .L C 
E 
G 


Using the alphabet for further decipherment, again assuming letters, the message can be deciphen•d to rPm!: 


"ATTACK WILL BEGIN AT ZERO SIX ZERO ZERO TOMORROW 
.MORNING IN VICINITY OF CROSSROADS SEVEN SIX 
SEVEN STOP YOUR REGIMENT WILL SPEARHEAD ATTACK 


STOP DIVISION COMMAND OF FOURTH DIVISION 


WILL BE :V10VED FROM CROSSROADS THREE ZERO THREE 


TO ROAD JUNCTION EIGHT SEVEN SIX STOP ONE ONE 


REGIMENT IS DIVISION RESERVE" 


The cipher alphabet used is: 


C ABODEFGHIJKLMNOPQRSTUVWXYZ 
P 
OQHRSTNPUVWXYZMKAIBLCDEFJG 


By rearranging the values of the two sequences, the enciphering alphabet can be derivPd and the keyword found. 


P 
ABCDEFGHI JKLMNOPQRSTUVWXYZ 


C 
QSUVWXZOR YPTOGAHBDEFIJKL1VfN 


Keyword: CRYPTOGRAPHY 


Hp = Oc 


c. The example presented in the preceding para- 
8-17. 'The Consonant Line Method 
graphs, being an artificial illustration set up to 
a. Another method for the determination "f ,."''PI 


demonstrate general principles, is relatively easy to 
and consonant ~quivalents, which is Pxtn·IIwh· tl:'<·ftil 


solve. This is so because the frequencies of the various 
in difficult cases of monoalphabetic ::;ub,..tinltion. i:-- 


elements analyzed: letters, digraphs, trigraphs, and 
the consonant line method. This method mak<-" tt,.;(' 


word patterns, correspond \Veil with that expected. 
of the positions of letters in the ciplwrtPxt n·!ati,·,. to 


This is not ahvays the case. The principles illustrated 
the occurrence of adjacent letters and is ba:--o•d ttpon 


arc general in nature and application, and depend 
the tendency for lo\v-frequency consonant,; to bP 


upon the formulation of assumptions. Recognize that 
flanked on one or both sides by vowels. If a di,..tribu- 


any assumption may be incorrect as well as correct, 
tion is made of the contacts of the lo11 -fn·q 11<'11<'.\. 


the best means of determination being to test each, 
ciphNtext letters of a monoalphabetic l'rypt.,~ram. 


ca~ting out those that prove incorrect. The analyst 
vowel-equivalents can be distinguislwd frolll ('()fl-;o- 
"·ill find it most profitable to vary the analytic 
nants in that they art' usually reprp,.;('nto·d b:v a 


approach thus providing a source of additional 
combination of the following chnracteri::;ti<'". 


assumptions. In some cases, a single approach may 
(1) They are usually high-frcqtwncy [;•t t•·r,... 


suffice to solve a simple cryptogram, but in the long 
(2) They have a variety of contacts. 
run, the more varied the techniques employed the 
(3) They combine readily with lo1\ -fn•q uency 


surer the solution. 
letters. 
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(4) They do not combine readily with one 
another and less so with themselves. 
b. The identification of possible vowels using the 
foregoing characteristics is simplified by the con- 


struction of a consonant line diagram, an 0nlarged T. 
For example, construct a triliteral frequPney distri- 
bution, see figure 8-16. 


A B C D E F G H I 
J 
K L M N 0 
P Q R S 
T U V W X Y 
Z 


US SZ -Y QY 


DQ LQ SE VZ 
ZD ES ER 
DC SR VS 
ZD riY WF 


DX JQ FQ 


SE YI 


WE JQ 


YI 


JQ 


HS 


RL 
DR 


IY 


ZF 


HS 


llQ 


D- 


zu· QP UQ ZR QD QR KV 
PQ JQ SE SN EQ 
XQ 


JQ EZ QJ US 


WR HZ JH 
QE RH VI 
SI QE RE 


ZR QS RQ 
IQ 
SY 
RZ 
ZW 
SV 
VR 


QE 
SJ 
QE 
QW 


JS 


QS ZX EU CE ZY HC NS QE QX EZ Yll 


IH XC YS ED RW RJ UQ QH XQ ER DQ 


SY DP HZ PE XP SJ QF 'l'X ZR TE RT 


XR JW KJ RJ 
XU SJ JX WS FR IK 


TQ EI YS QU 
RS QF JF SU PZ YX 


HJ XT RK 
SK l!Q SD QY XZ IH 


HS HI VP 
QS 
DZ PS F'D 


IW MJ XX 
XZ 
ZR JS YD 


EF XE EH 
GR 
XX 
VH XY YJ 
SP 
YJ 
HV EU YD 
~!Z 
XE 
CM PQ UU 
RU 
HQ 


JX FH KX 
Z~ 
UX 


LQ JX UV 
Sll 
QX 
FX 


RI 
IH 


ZU 
EJ 


PV 
Jrl 
NI 


EJ 
FH 


VH 


Figure 8-16 I· Triliteral frequency distribution ( U). 


Using the triliteral distribution of figure 8-16, a 
the left. Below the crossbar. the letters usNl as 


consonant line diagram is constructed as in figur0 
prefixps nrc inscribed to the left of thP nrtical part. 
8-17. Above the crossbnr, all low-frequency letters 
ttndPr the letters they prPcede. Those Jpttprs used a::> 


of the distribution (C, K, L, ~1, N, P, T, V, F, W) 
suffixes are inscribed to the right, under the letter 
are inscribed horizontally, repeated on the right and 
they follow . 
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CONSONANT LINE 


CKLUNP'lVFi-1 I 


CKLMNPTVFiv' 


D 
D 
Q Q 
Q . Q Q Q 
Q 
Q 
Q Q 
Q Q 
u u s 
s 
s 
s 
s s 
s 
s s 


N 
II 


z 
z 
z 
R 
R 
R 
R 
R 
E 
E 
E 
X X 
X 
X 
K 
v 
I· 
v 
T 
T 
y 
y y 
y 
I 
p 
w 
w 
ll 
H 
H 
u 
F 
FFF 
J 
J 
D 


Figure 8-17 <f;. Consonant line diagram (U). 


c. Considering both the number of contacts and 
their variety shown in the diagram, it is likely that 
the cipher letters Q, S, and R are vowel equivalents. 
The cipher letters X, Z, and E also appear possible 
as does Y. However, they represent a total of seven 
letters where there are only si.x vowels. The normal 
frequency of Up and Yp is less than the high- 
frequency consonants. Therefore, the last four cipher 


letters probably contain one or more consonant 


. equivalents. Having isolated three vowel equivalents 
with some certainty and four other letters as probably 
representing several vowel equivalents, the analyst 
has several option:;,. 


(1) With the most likely vowel equivalents, 


the procedures given in the study of vowel-consonant 
relationship may be followed to determine thl' 


identity of each vowel and associated high-frequency 
consonants. 
(2) A study of each vowel's contacts can be 
made in order to classify additional consonant 
equivalents. For this, a vowel line is constructed 
(fig. 8-18), for those most likely vo\\·el equiYulents. 
This line may be constructed like the consonant 
line, or as a simplified form given below. In t-itlwr 


case, the intent is to tabulate the contacts of the 


vowel equivalents, having in mind the characteristic 
of a vowel contacting a consonant more often than 
it contacts another vowel, or itself. 


Qc ~1CDEF¢~~JKLMN¢P~R~T~VWLYZ 


Sc J1CDEF?HIJKLMN~PQRSTVVKLYZ 


Rc 
~- 
~ -- - 
- 
=~ 
l1CD~F~~£JKLMN¢P~R~LVVW~L~ 


Figure 8-18 ~Vowel equivalent line (U). 
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d. Examination of the Qc vowel-equivalent line 
reveals that He, lc, Jc, Vc, and Xc arc probably 
consonant equivalents. The Sc line tends to confirm 
the Jc and Xc consonant-equi\·alent assumption, 
and also indicates that the Ec may also be a con- 
sonant equivalent. The Rc line confirms Ec, He, Jc, 
and Xc as probable consonant equivalents, and also 
indicates that Yc may also be a-consonant equiva- 
lent. Thus far then, the following assumptions 
appear logical: 


Vowel Equivalents: 
Qc, Sc, Rc 
Consonant Equivalents: Ec, He, lc, Jc, Vc, Xc, 
and Yc 
If the above assumptions are valid, only the Zc of 
the questionable 
vo\n~l (•quiva!Pnt i:-; act11ally u 
vowel equivalent. At this point, the analyst resorts 
to a study of the characteristics of VO\H)ls and 
consonants in combination and relation to one 


another to discover the corn•ct plaintPxt Pqui\·alent 


for each cipher value. 
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CHAPTER 9 rl' 


MULTILITERAL MONOALPHABETIC SUBSTITUTION SYSTEMS 


----·------------------------------------------------------------------------------------ 
Section I. (C) CHARACTERISTICS AND TYPES 


9-1 . 'l'fi Introduction 


a. ~lphabetic substitution is classified into 
either uniliteral or multiliteral. In the former, then• 


is a strict one-to-one character relationship betwPen 


the units of the plaintext and the units of the ciplwr- 


text. A multiliteral monoalphabetic substitution 
cipher, on the other hand, is a cryptographic system 
that produces ciphNtext units of t\\'O or more 


characters for l'ach equivalent charactl•r of the 


plaintext. 
b. The term multiliteral is used in cryptography 
in its broadest sense. It is applied to those systems 
which exhibit a constant relationship bet\\·een one 
ciphertext unit and one plaintext unit, regardless 
of whether the system employs letters, numbers, or 
special symbols as. ·the ciphertext character. For 
specific reference, multiliteral systems are classified 
by the number and type of ciphertext characters 
used to replace each plaintext unit. 


(1) Biliteral refers to systems involving the use 
of two-letter ciphertext units. 


(2) Triliteral refers to systems involving the 
use of three-letter ciphertext units. 


(3) Dinomic refers to those systems involving 
the m:e of two-figure ciphertext units. 


(4) Trinomic refers to those systems involvin~ 


the use of three-figure ciphertext units. 


c 
R 
E s 
T 


R I 
D G E 


A 
B c D E 
F 
G H I 
K 
L 
M N 0 
p 
Q R s T v 


'V' w X 
y z 


CRa = Ap 


3 


2 
1 


c. Multiliteral systems in general represent an 


attempt to offer greater security than tht> simplP 


uniliteral cipher systems. Once the princip!P of 


solving 
nniliteral 
substitution systpms 
by 
the 
analysis of the plaintext charactrristics rdl<•d<·d in 


tlw ciphertext became kno\Yll, tlw cryptographPr. 
sought methods that would either disguis<'. supprPss. 


or rliminate these characteristic fn•qu<'IH'i<·s 
or 


patterns in the ciphertext. Among tlw nutltilitNttl 


systems developed are simple biliteral system,.;. 


biliteral systems using variants, and multinomic 
systems. 


9-2. {dJ Simple Biliteral Substitution 
a. rt ~imple biliteral substitution ::;ystems, figure 


9-1, the ciphertext unit to plaintext unit ratio is 


a constant 2 to 1. The ciphertext unit is rither a · 


letter or number, with its identity lu:n·ing little or 
no effect upon either the cryptographic proces:- or 
the cryptanalysis 
of the 
ciphertc>xt 
prod uc<'d. 


Generally, these systems are based upon a matrix 
which contains the plnin com pom•nt 
a! ph a bPt. 
Row and column coordinates form th(• ciphertext 


units which are ::>ubstituted for Pach plaintext 


value. Note that to fit the alphabets to tlw dinwnsions 


of the matrices, tht• I and J are combinPd into a 
single cell in the first; the I and J. U and \. an· 


combined in the second matrix. 


1 
2 
3 
4 
5 
6 
? 
8 


A 
D G K 
N 
Q 
T 
X 
B 
E H L 
0 
R v y 


c F 
I 
M p s w z 
- 


J1a = Ap 
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b. In figure 9-1, the plaintext component is limited 
to 25 and 24 characters respectively by combining 
certain values which could be used interchangeably 
without causing a loss of intelligibility. Encryption 
in either of the systems is the same. The plaintext 


equivalent is located within the matrix, and the row 
and column coordinates indicate its position in its 
ciphertext value. For example, the message below 
could be enciphered as shown: 


S 
E 
N 
D 
R 
E 
I 
N 
F 
0 
R 
C 
E 
.M 
E 
N 
T 
S 
X 
X 


SDCEEDCG SICERGEDRREGSICDCEEICEEDSGSD TDTD 


SDCEE DCGSI CERGE DRREG SICDC EEICE EDSGS DTDTD 
or 


SEND RE INFORCE:VIENTS XX 
16223532 2622133512252611221422353716 3838 
16223 53226 22133 51225 26112 21422 35371 63838 


c. The process of decipherment is the reverse of 
the process of encipherment. The cryptographer 
breaks the ciphertext into digraphs or dinomes and, 
using these as coordinates, locates their equivalent 
plaintext value. Note that in these particular sys- 
tems, the order of selecting the row and column 
coordinates as ciphertext values must be predeter- 


mined as row and column or as column and row. 
Normally the former system, similar to reading 
map coordinates, is used. 
d. The biliteral and dinomic alphabet produced 
by the system illustrated above is also termed bi- 
partite, as each cipher element can be divided into 
two distinct parts, each having a clearly defined 
function as row or column coordinates. On occasion, 
the systems illustrated are termed bipartite systems 
due to the nature of the cipher alphabet produced. 
e. It is obvious to the analyst that these particular 
systems offer little or no difficulty. Essentially, the 
process does not effectively disguise either letter 
frequency or word pattern. Further, the bipartite 
nature of the alphabets produced by these systems 
is one of their weaknesses, making them easy to 
recognize by the analyst. In effect, the foregoing 
system does nothing more than double the length 
of the ciphertext, offering little more security than 
the uniliteral monoalphabetic substitution system. 


To circumvent these weaknesses, multiliteral sys- 
tems em~ying variants were developed. 


9-3. {~ ~iliteral Systems With Variants 
a. In a basic biliteral system, a given plaintext 
value is always replaced by one constant ciphertext 
element. Each time that letter is used again, the 
same ciphertext element appears. The biliteral sys- 
tem with variants is an attempt to provide variant 
ciphertext values for each plaintext value, thus 
suppressing the appearance of letter frequency and 
word patterns in the ciphertext. There are two basic 
methods whereby these variant values are intro- 
duced. The first, using subterfuge, results in a 


pseudovariant which only camouflages the true 
biliteral nature of the alphabet. 
(1) One such method is to construct the matrix, 
including row and column coordinates, in such· a 
manner that the resulting cryptogram resembles 
other systems. For example, using the matrix in 
figure 9-2, messages could be enciphered, and when 


the ciphertext is divided into five-letter groups, it 


gives the appearance of code groups. 


A 
E 
I 


0 u 


B C D P G 


A 
B c 
F 
G H 
L 
M N 


Q 
R s 
v w X 


R 
A 


OC 
AB 


D E 
I 
K 


·o 
p 
T u 
y 
Z1 


I 
D 
EF 
AF 
s 


OD 


Figure 9-2 7· Artificial code language matrix (C). 


(2) Another method is to add additional digits, 
thereby disguising the bipartite nature of the alpha- 
bet. For example, where the ciphertext is composed 
of dinomic elements, a "sum-checking" digit which 


is the noncarrying sum of the two digits of the 
element may be used. The cryptogram produced by 
the dinomic system previously illustrated could be 
changed to appear as a trinomic system by the 
following operation. 


CIPHERTEXT 
16223 53226 22133 51225 26112 21422 35371 63838 
1+6=7 167, 2+2=4 224, 3+5=8 358, etc. 
CIPHERTEXT AFTER SU:Vl:VHNG DINO:\IES 


16722 43583 25268 22413 43581 23257 26811 22241 


45224 35837 01673 81381 


(3) Even a set of randomly selected characters 
may be used, inserted following each digraph or 
dinome solely for the purpose of confusing the 
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analyst. But here, as in the two preceding examples, 
little is gained. In the first case, the limitations in 
the values used soon reveal the system as simple 
multiliteral, and the bipartite nature of its alphabet 
makes analysis easy. This is also true with the 
second case, and additionally, this particular method 
results in one plaintext element being replac~d with 


KFA 
L G B 
!1 H C 
N I D 


0 J E 


OMJFA 
N KGB 
L H C 


I D 
E 


V W X Y Z 


·~ - .. - 


A B 
F G 
L M 


Q R 
v J.l 


0 
UN 


c D E 
H I K 
N 0 p 
s T u 
X y z 


(1) 


J K L 


J: 


A 
E 
T 


0 


D 
p 


L 
t1 
.1 


B 


N 


R 
I c 
G 


c D E 
A L u 
s F w 
H y X 


u v K 
B Q z 


( 3) 


0 8 5 1 


9 6 2 
7 3 


4 


three ciphertext character:;;- ~t!l inordinate increase 
of message length for security gain. 
b. By far the simplest practical method of intro- 
ducing variants int(l a mnltiliteral substitution sys- 
tem is by the Ll"•· of ;tddiLionaJ row and column 
indicators. Figure 9-3 illustmtes some of the possi- 
bilities whereby this can be accomplished. 


TN H B 


VPJC 


W Q K D 
X R L F 


Z S H G 


09 
1;) 


21 
27 


JJ 


A E.I 0 U 


A B c D E 
F G H I K 
L t1 ll c p 


IQ R s r· 
J. u 


.l' ~I X y z 


( 2) 


1 2 J 4 5 


H y D RA 
u L I c B 
E F G K j,; 
N 0 p LQ_ s 


] v w X z 


( 4) 


1 ~ J 4 ~ 6 7 8 9 


T E R H I II A L S 


B C D F G H J K 0 
PI G. u v w X y Z I 
2 3 4 5 6 7 8 9 C/J 


( 5) 


Figure 9-3 r· Multiltteral systems with variants (U). 


c. The matrices in figure 9-3 represent some of the 


simpler means of accomplishing biliteral substitution 
with variants. Each is disguised by one or more 
characteristics representative of biliterals 
with 


variants. 
(1) Note that example 1 provides six possible 
variant cipher elements for each plaintext unit. Ap 
could be represented by any one of the cipher 
digraphs KV, KQ, FV, FQ, AV, or AQ. 
(2) Example 2, which is an extension of the 
pseudovariant system shown in paragraph 9b ( 1), 
now provides four variants for each plaintext element. 
(3) Example 3 illustrates a method of providing 
a number of variants approximately equal to the 
normal frequency of occurrence of a given plaintext 


letter. Thus Ep may be replaced by 25 different 
('ipher equivalents, while the Kp is replaced by 
onlv two. 
(4) Example 4 illustrates that a biliteml alpha- 
bet need not be a bipartite. r;o single element 


exclt1sively indicates row or column, i.e. the digit 1 
indicates t'vo rows of one column. 
(5) Example 5 illustrates a method of providing 
for the normal frequency of usage of the plaintext 
letter, this time based upon a key word composed of 
high-frequency letters. It also provides for the use of 
digits rather than requiring that they be spelled out. 
(6) Note that encipherment using matrices 1 
and 2 are commutative; the coordinates can be read 
in any direction and the same plaintext letter is 
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always found. For example, in matrix number 2, BAc 
and ABc both equate to Ap. All other matrices 
illustrated are noncommutative; therefore, the method 
of indicating and reading out the plaintext letters 
must be agreed upon in advance. For example, in 
matrix 3 the cipher element BD may indicate Fp or 


Cp depending on whether the or9-er is row-column, 
or columyrov.·. 
· 


9-4. ~) Security of Multiliteral Monoalphabetic 
Substitution 
The obvious disadvantage of all such methods dis- 
cussed in the preceding paragraph is that the crypto- 


graphic text is exactly twice as long as the original 
plaintext. Moreover, there is no great compensating 
advantage from the standpoint of security in most 


cases. It is possible that the number of variants is so 


extensive that the system's overall security could be 
improved, but any such scheme would entail the 
risk of error in the encryption process. It has been 
shown through experience that when given a number 
of choices of variant values, the cryptographer will, 
over a period of time, tend to use only a very few of 
those available. Thus the provision of variant values 
by the system can be largely forfeited. 


Section II. ~ANALYSIS OF MULTILITERAL SYSTEMS 


9-5. ,,;;ntroduction 


a. K~ :nalysis of simple multiliteral systems and 
multliteral systems with variants, whether dinomic 
or biliteral, involve certain similar techniques and 
methods. Although the more complicated variant 
systems may require the use of techniques particular 
to their case, the underlying principles are similar. 
Accordingly, those general principles will be ex- 
plained and demonstrated in this section. Those 
special techniques applicable to specific cases will 
be developed in th~ succeeding section. 
b. The analysis of all multiliteral systems may 
take one of two general courses. One method which 


Message 


can easily be employed in the case of a simple 
multiliteral system, and which unJ.er certain cir- 
cumstances can be useJ. in the case of multiliterals 


with variants, i:,; the :,;olution of tlw litPral value:,; 
a:,; though they were monographic. This is done by 
using the same approach as for the analysis of uni- 
literal monoalphabetic substitution. To demonstrate 
the basis for this particular approach, examine the 
cryptogram given below. Herein, it can be seen that 
the ciphertext, produced by the system illustrated 
in paragraph 9-2, exhibits the same pattern repeats 
and letter frequencies as does the plaintext. The only 
difference is that the ciphertext exhibits this pattern 
digraphically rather than monographical(y. 


ATTACK TO BEGIN AT ZERO SIX ZERO ZERO HOURS TO::\IORROW L"'{ 


Ciphertext 


CRSGS GCRCD RESGE GC ICE R l RGE DCRSG 
TECES IEGSD RGTDT ECES l EGTEC ESIEG 
RDEGS ESISD SGEGE lEGS/ SIEGT ITDTD 


c. When the message above is reduced to unilitPral l<'rllls, the word patterns of the undNlying plaintext 


seem to leap out. 


A 
B 
B 
A 


CR SG SG CR CD RE SG EG CI CE RI RG ED CR SG 


A 
B 
c 
D 
A 
B 
c 
D 
A 
B 
c 
D 
TE CE SI EG SD RG TD TE CE Sf EG TE CE Sf EG 
A 
B 
RD EG S E S I 
SD SG E G E I 


d. The second general approach involves the si- 


multaneous analysis of the ciphertext for plaintext 
values and the recovery of the matrix. This approach 
may be used for either the simple biliteral or the 
biliterals with variants. It is more appropriate in 
the ca~e of the latter system, for all variant forms 
of each cipher element must be identified prior to 


:\ 
c 
c 
A 


EGSfSfEGTf TD TD 


tlw reduction of the cipher elements to uniliteral 
t<'rms. 


e. Prior to the start of any analysis, however, a 


system must be identified as to general elass and 


wherever possible to the specific type ''ithin that 


dass. In the following paragraph, methods of identi- 
fying multiliteral systems are treated in detaiL 
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9-6. <f.> ldentiAcation 


a. The identification of a biliteral system is much 
easier than the identification of some uniliteral 
substitution systems. This is particularly so in the 
case of the simpler forms of the biliteral system. 
Normally, the initial basis of identification lies in 
the recognition of the textual limitation imposed by 


AHARE 


ARAOC 
SSASP 


AEAEA 


SSEER 
SAECH 
ESSAE 
RCRCH 


ARC SO 
ARAEP 
OR SEA 
SSCHC 


The briefest examination reveals that aside from the 
three J's appearing at the end of the message, these 
probably being nulls, there are only eight different 
letters used, the letters A, H, R, E, S, C, P, and 0 


respectively. If the message is divided into digraphs 
and another count is made, a definite positional 


limitation would be observed. The letters A, E, S, 
C, and P \Yould be found in the first position and the 
letters H, R, S, E, and 0 would be noted in the last 
position. On the basis of these limitations, the 
analyst could safely assume that the message repre- 
sents a case of multiliteral eneipherment. 
b. A close examination of the message reveals 
several other features which are characteristics of 
multiliteral systems in general and which may also 
be used for identification purposes. 
(1) The number of the letters or digits in the 
message, excluding nulls if they are added after 
encipherment of the plaintext, is a multiple of the 
cipher element. In the example above, there are 112 
letters, or 56 digraphs. Conversely, the length of the 
cipher element can sometimes be derived from 
message length, for example, a dinomlc system using 
sum checks. In any event, the analyst immediately 
explores this possibility. 
(2) The number of letters or digits in repeated 
series are the same in each case and are a multiplE' of 
total message and cipher element length. For 
example, in the message above, two repeats occur: 


RSHSS CHCHS SASPH and SSCHC HSSSO, 
whiciliire equal in length, 8 letters or 4 digraphs long. 


(3) The number of letters between repeated 
sequences, between the beginning of the message and 
occurrence of first repeat, and between the end of the 


last repeat and the end of the message, are all 


multiples of two. For example, there are 18 letters 
before the first repeat. The repeat contains 8 letters. 
Following it, there are 74 intervening letters, again 
the 8 letters are repeated, then 4 letters to the end 
of the message. Each interval is a multiple of 2; 
hence, this is the cipher element's size. 


the number of characters used as row and column 
indicators and their manner of use. vVhere the indi- 
cators are limited in number and are bipartite in 


natY.re, identification of the system is q nite easy. For 


example, a · uniliteral frequency distribution of the 
following c.ryptogram would hardly be necessary, as 
tb.e lirnitati.on in the number of letters used is obvious. 


RSHSS· 


o s ~a o- 
EsscR 


HSSSO 


CHCHS 
SEASP 
SECHA 
PSJJJ 


SASPH 
HAOSE 
RCOC'S 


9-7. ~ 
Statistical Tests 


a . • Just as the Phi (cp) and the Index of Coinci- 
dence (I.C.) tests can be applied to a cryptogram to 
determine whether it is monoalphabetie, so also can 
variations of these same tests he applied to the 
digraphic distribution of a cryptogram to determine 
whether the cryptogram in question is monoalph:t- 


betic when considered as a multiliterul cipher. The 
basis for the application of these tests lies in the 
uniliteral nature of simple multiliteral substitution 
and the limitations inherent in a multiliteral 'vith 


variants which make it susceptible to these tests. 
b. In foregoing chapters, both the cf> and the I.C. 
tests are explained in tNms of thl•ir :tpplit"ation to 
uniliteral monoulphabetic substitution. TlH' g1·neral 


form of the tests \Vhen applied to digraphic di,..tribu- 


tions remains unchanged though the ,.,ditt'" an• now 


different. The plain and random con,.;tnnt..; :tnd the 
"N" in the formulas no\V pert a in to t ht · n \l rnllt'r of 
digraphs under consideration instt>ad tlf t ll<' rt\lmlwr 


of single letters. The formulas arc> shn1111 lwln11·: 


(1) Digraphic Phi test, (24>). 


2¢o=~f(f-1) 


2cpp=.0069~(~ -1) 


2¢r=.0015N(N -1) 
f=Number 
of 
occurrerH·e,.; 
"f each 


digraph 
N =Number of occurrences of :dl 1ligraphs 
(::;F) 


(2) Digraphic 2¢I.C. test. 


I.C.=~C-(f-1) 


N(N -1) 
C=The number of possible digraphs, 


i.e. the number of letters in the 
alphabet squared. 
For 
English 
C=26x26=676. 
N =Number 
of 
occurrences 
of 
all 


digraphs. 
f=Total number of occurrences of each 
digraph. 
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(3) The digraphic I.C. can also be determined 
by comparing the value of observed occurrences to 
the value of expected random occurrences, with the 


I.C. being expressed in terms of a ratio between the 
two values. The formula for this test may be ex- 
pressed as: 


I. C. =2«t>o 


2«t>r 


In the case of digraphs, the I.C. for English plain- 
text is 4.66 and the I.C. for digraphic English 
random text is 1.00. 


c. These foregoing tests, as all statistical tests, 


are subject to a degree of error, depending upon the 
makeup of the cryptographic test being studied. 
Specifically, in the case of multiliteral systems the 
presence of repeated groups, the limitations in the 
number of different digraphs present, and the size 
of the sample itself all tend to distort the test 
results. Therefore, they must always be used \vith 
caution, with the preferential method being to 
employ them in conjunction with other evidence for 
identification purposes. 


d. The first step in using any of the test steps is 
to tabulate the frequencies of all digraphs comprising 
the message, and to determine the individual value 
of f(f-1). This may be done as follo\vs: 


WMTST 
S W.2l1I M BOIST 
SW.LvilVU 
WUEMT A1HMTE EMIUE 
1\1HU T E 
TMEMW OElVII"C 
I STOW EEMEU TUIST 
0 TS TO 
TUIUI 
SHSEM 
~vs E s E 
MISTS WMHSH UTUHS 
!SESE 
UEUTU HSTST STUHM HSEMW MIMIO 
WUTO I 
U EJ.fXX 
WM WU W 0 WE VV S T S T M T E T 0 T U I U I S L\1 


f 
5 
3 
1 
1 
1 
7 
2 
2 
4 
5 
4 
6 
2 
f(f-1) 
20 
6 
0 
0 
0 
42 
2 
2 
12 
20 
12 
30 
2 


EO Ej\1 EU ES HS HM HU 


1 
10 
3 
2 
5 


0 
90 
6 
2 
20 


(1) Using the values determined above, the 
values of the 24> test may be computed as follows: 


2«t>o=~f(f-1) =270 
2«t>p= .0069N(N -1)=.0069X69X68=31.5478 


2«t>r=.0015N(N -1) = .0015X69X68=7.0380 


(2) The 24> I.C. may be computed as follows: 
c f(f-1) 
N(N-1) 
676X270 
68X69 
182520 =38.9 


4692 


(3) And the second method of determining a 
digraphic I.C. may be computed as follows: 


2 I.C.=2«t>o 
270 
2¢=7=38 


e. Note that in the case of the computation of 
2 I.C. above, the value derived is in the value range 
of 31 to 43. In the case of the biliteral system the 
expected values for a simple biliteral fall in the range 


of 20 to 40, and the expected values for n bilitPrnl 


with variants is 6 to 20. The extremely high diffPrt>nec 


in value computed for the digruphic Phi test lies in 
the fact that the test involves a comparison betwPen 


an expected occurrence based on the possibility of 


2 
2 
2 
~f=N=69 


2 
~f(f-1)=270 


676 different digraphs used in plaintext. against the 
actual occurrence of onlv 69. 


9-8. (~Analysis of B~literal Systems 


a. Once the system has been satisfactorily idt•nti- 


fied, the analysis of the system may comnH·nce. 


The analysis may include the simultaneou:- attempt 


to recover the matrix and the estub!i,hntt'Itt of 


plaintext values for the cipher elements. 
(1) In the first case, use is made of tht> number 
and positional limitations of the cipher ele-ments. 


For example, a tabulation of the letter comprising 


the foregoing message reveals that only nirw differ- 
ent letters (W, M, T, S, I, E, 0, H, and r· n•spec- 


tively) were used. Further examination quickly 


reveals that there is a definite positional limitation 


involved. The letters W, T, I, E, and H occur in 
the first position and the !C'tters 1vf. S, 0. C 
111td E 


appear in the last position. The numbPr of tlw lt·t tc>rs 
involved and their positional limitation im nwd in tt•ly 
,;uggests a 5 x 5 matrix of 5 cells by 5 t't'll:- 11·ith 
these lettPrs as row nnd column inclicntor:-_ At'l'nrd- 


ingly, u matrix of this configuration figun· 9-4 is 


set up: 
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M 
s 
0 
u 
E 


I 
I 


~1 


T 


I 


E 


H 


I 
I 
I 
I 
I 
I 


Figure 9-4 (C). Preliminary matrix with row and column 
indicators ( U). 


(2) Note that the dimension of the assumed 
matrix is determined by the composition of the 


cipher elements. This step presupposes the correct 
identification of the cipher unit and correct inter- 
pretation of their positional significance. At this 
particular point it matters little if the row and 


column indicators are reversed, for a simple turn 
of 90° will correctly realine the indicators. 
b. After identifying the row and column indi- 


cator;; and determining the matrix dimensions, the 
next step is to insert values into the cells of the 
matrix. It is at this point that use is made of the· 


uniliteral nature of simple multiliteral substitution 
by reducing the digraphs to uniliteral terms. This 
may be done very easily by substituting a letter 
for each different digraph appearing in the crypto- 
gram. If not more than 36 different combinations 
are present in the cryptogram, the extra values 
above 26 may be represented by digits. As a general 
rule, where less than 26 different cipher elements 
are encountered, it is advisable to reduce them to 
uniliteral terms. This permits the construction of a 
trilitcral frequency distribution, and use of all other 
studies associated with the analysis of monoalpha- 


betic substitution. 
(1) For this purpose the tabulation of digraphs 
previously made may be used. Using this tabulation, 
one letter is assigned to each different cipher element. 


WE WM W 0 W S WU T S T 1\.1 T E T 0 T U I U I S 
I ZW I 0 


A 
B 
C 
D 
E 
F 
G 
H 
I 
J 
K 
L 
M 
N 
EOEMEUESHSHMHU 
o 
P 
Q R s 
T 
U 


This process results in a pseudoplaintext which 


reflects all the underlying characteristics of the true 


plaintext. Inasmuch as the same characteristics are 
exhibited by the ciphertext elements, there may be 
some question as to the need of this step. The reason 
for this is twofold; first, it permits the differen titl- 


tion of the row and column indicators and the 
plaintext letter they represent (useful in the re- 
construction of the matrix), and second it provides 
a suitable element for manipulation in appl,ying the 
technique of solving monoalphabetic substitution 
systems. While this factor is not of any great impor- 
tance in relatively short cryptograms, it is very 
helpful where many cipher elements are under 
study. 
c. With the digraphs reduced to uniliteral terms 
and having an assumed matrix, the recovery of the 
plaintext may begin. In this step the frequency 
distribution of the pseudoplain values may be 
studied individually and fitted to the normal to 
recover their true plain text values; or the message 
text may be scanned for word patterns and then 
compared to the frequency distribution for identifi- 
cation of plaintext letter values. In all cases, when 
a plaintext value has been recovered, it may be 
inserted in the matrix at the point of intersection 


... 


of its cipher ro\v" and column Indicators. This per- 
mits the simultimeous reconstruction of the rnn trix. 


and if it shows any symmetrical pattern, allo\\-,; the 


placement of additional 
plaintext 
,·alue,;. 
thus 
hastening the final solution. The <'I'.\"]ltogmm. re- 
prodnced in terms of the arbitrary u nil: teral ,-~dues 
previonsly a,;signed, now appetlrs in figure 9-5 ,,·ith 


significant repeats underlined. 


BFFBMOLFBEEPGTHPKP 


UHGPCPKLIAPQJLIFIJ 


KLSPDRPLFBSUJSLRQQ 


JSFFJTSPB!!NEIKP 


Figure .'J-.5 (C). Ciphertext prepared for anal!Jsis (C). 


(1) The pntterns .lBRl-- and .lRl-- for 
the sequence BFFBAI and PKPUH tlre ,;ugge,.;tive 


of the words .lTTACK and ENEJn· respectively. 


Aceepting these assumptions for the moment, the 


plaintext values are inscribed in the matrix using 
the appropriate cipher diagraphs as row and column 
indication. 
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p 
A 
T 
T 
A 
c 
K 


P-P 
B 
F 
F 
B 
M 
0 
c WM T-8 TS' WM I~J EO 


~1 
w 
A 
T 
I 
c 
E 
E 
H 


(2) Analysis continues in the same vein as 
above, i.e. by attacking the characteristics of the 
ciphertext itself. However, in this case, sufficient 
evidence is at hand to attempt recovery of the 
matrix. Note that the first column in the matrix 
contains the first and terminal letters of the first 


five letters of the alphabet (ABCDE), suggesting 
the C and D are the correct values for the blank 
cells. If this is the case, presuming the letters to be 
inscribed in alphabetic order, the sequence of the 
row indicators are out of order; E, as E.Wlc=Ep 


must be last, and T and H of the row indicators 
must then lie in either the second and fourth, or 
fourth and second positions respectively. Assuming 
the latter, the word WHITE is noted; therefore, the 
matrix is rearranged accordingly (fig. 9-6) and B 
and C plain are inscribed. 


w 
H 
I 
T 


1:: 


U 
S 
0 
U E 


A 
B 
M 
c 
N 


D 
T 
y 
E 
K 
----- L__ 


Figure 9-6 (C). Insertion of plaintext values (U). 


(3) Examination of the columns shows a good 
alphabetic pattern downward. However, they are 


not in order sequentially; the row containing the T 
follows the A-E row \vhen it should appear as the 
next to last row. Thus the columns can be recorded 
as follows and missing values assumed (fig. 9-7). 


s 


T 


0 


K 


E 
N 
p 
K 
EM IU 
U 
E 


y 
N 


M 


E 
M 
Y 


P 
U 
H 
EM HU TE 


N 0 
U S 
E 


w 
H 
I 
T 
E 


A 
B 
c 
D 
E 


F 
G 
H 
I 
K 


L 
Q v 


H 
R w 


N s 
X: 
0 
T 
y 
p u z 


Figure 9-7 (C). Solution of matrix (U). 


(4) Using this matrix the message is nO\\. 


deciphered logically, proving all past assumptions. 


ATTACK HA8 BEEX STALLED BY 
ENEMY DEFEXSIVE POSITIO~S 


REQUEST AR:\IOR SUPPORT TO 
BREACH LINE. 


d. The foregoing solution repr.esents an example 
of attacking the message through the system \\·hich 


produced it. This is possible only because the system 
was simple; no variants were used. The keywords 


were common and could easily be assumed. and a 


recognizable route of inscribing the plaintext into 
the matrix was apparent from the first. While this 
method for solution is quicker than an analysis of 
word patterns, use of frequency distributions. etc .. it 
is not ah\·ays possible. In such cases, once a multi- 
literal cipher has been reduced to uniliteral terms, 
the most difficult multiliteral ciphers may be suc- 


cessfully solved by the monoalphnbetic analyti<.: 


techniques given previously. 


Section Ill. ~NAL 
YSIS OF MULTI LITERAL WITH VARIANTS 


9-9. (r/General 


a. IK:h: final analysis, the simple biliteral system 
offers no more security than a uniliteral substitution 
system. To circumvent this obvious w·eakness, 


variant multiliteral systems are used. The systems 
provide for additional row and column indicators or 
for variant internal values. These enable the substi- 
tution of several different cipher elements for each 
plaintext element. The ratio of cipher elements to 


plaintext elements may now be t\\·o or more to one, 
instead of the one to one ratio of a simple multiliteral 
system. 
b. An example of a multiliteral system with ex- 


ternal variants is shown in paragraph 9-3c. Crypto- 


graphically, the method of operation of these systems 


is similar to that of the simple multiliteral system, 
with the exception that the cryptographer now has a 


choice of several values for each plaintext value. 
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Using the first and second examples shown in para- 
graph 9-3c, Ap is represented by the cipher elements 
shown below: 


Example 1. KQ, KV, FQ, FV, AQ, AV=Ap 


Example 2. TA, NA, HB, BA 
= Ap 


To a great extent, the actual number of variant cipher 
elements for a given plaintext letter occurring in a 
cryptogram is dependent upon the cryptographer; 
often the actual number used is limited by failure to 
make use of all values provided. 
c. Identification of multiliteral with variants is 
basically the same as that for a simple multiliteral 
system. The cryptographic text will generally exhibit 
the same characteristics, though perhaps not as 
pronounced. These characteristics are: 
(1) A uniliteral frequency distribution may 
show a limitation on number of letters used, de- 
pending upon the total number of row and column 
indicators used. 
(2) Some positional limitations will usually be 
present with certain letters or numbers appearing 
only as row or column indicators. 
(3) Message length, repeats, and distance be- 
tween repeats will be divisible by the length of the 
cipher element. 
(4) Repeats are likely to be short and frag- 
mentary, and are often composed of several different 
values. 


· (5) The 2 <P I.C.'s produced by the statistical 
tests will be lower (6-20) than for a simple biliteral 
system. Generally, the shorter the message or the 
less repeats it contains, the lower the 2 <P I. C. will be. 
d. Once the variant values of a multiliteral with 
variants system can be equated to specific letters, 
the course of analysis is in all respects similar to 
that employed in the case of the analysis of a simple 
multiliteral system. The cipher units are reduced to 
uniliteral terms; then frequencies, repeated sequences, 


and word patterns are studied for the substitution 
of plaintext values. It is in the former area, the 
matching of the variant values, that different 
techniques are employed. In one technique, the 
structures and frequencies of occurrence of the 
cipher units are studied to identify variant values 
having the same plaintext value. In another tech- 
nique, the approach lies in the study of isomorphic 
repetitions of text for the determination of like 
variant values. Both techniques are amplified in 
succeeding paragraphs. 
· 


9-1 0. <I> Frequency Matching of Variants 
a. In the case of a variant system, \Vhere the 
total number of variants is limited, matching of 
variant values becomes possible through a study of 
their frequency distribution. This method of matching 
is predicated on the assumption that in a message 
of moderate length, all variant cipher values for a 
given plaintext letter will be used. Fmther, it 
assumes that each variant will be used with approxi- 


mately equal frequency. Thus, the variant row and 


column indicators for any given letter will appear 


equal in combination with one another. For example, 
the variant values for Ap given in the example in 
paragraph 9-9b can be expected to appear equally 
often. The total number of occurrences of a set of 
variant cipher values will approximate the frequency 
of the plaintext letter they represent. Thus, a definite 
pattern is imparted to the cipher elements which 


can be observed when a digraphic frequency count 
is made in the form of a m!ttrix. Therein, the rows 


and columns correspond to the variant values which 


exhibit profiles equating to the frequency of combi- 
nation of these letters. vVhere a number of rows or 
columns have a similar profile, a common plaintext 
value for their indicators may be <lssumed. A 


d1graphic frequency count of the message in figure 


9-8(!) will appear as shown in figure 9-8@. 
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L 
p 
c 


A 


N 


I 


E 


K 


0 


F 


B 


R 
s 
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ALNPI 
CNDEIJ 
EGKDO 
CAT NT 
PGAPP 
DOQBM 
IGECB 
UOUNQ 
PLBQB 
TIDAT 
NLRPE 
HILAQ 
AGETB 
HBPSQ 
BGICP 
GPCBT 
EGIHO 
PRGAP 
EPOQK 
UPPAH 
ALAMN 
PKDAU 
IHAGS 
NAQPM 
NQSUB 
UEDOP 
AT ICO 
DBHKC 
AUBUP 
CSHID 


BGBPK 
GOQBD 
KHBTP 
DPUA'l' 
KQAGO 
MOVED 
NPEUA 
HKCNC 
BQECP 
HBHBL 
IGBMA 
UPGIP 


BGKDO 
CIHNQ 
SGAPF 
QSl·:SL 


Divided into digraphic elements: 


AL 
NP 
IC 
ND 
ED 
EG 
KiJ oc AT 
NT 
PG 
AP 
PD 
OQ 
BM 
IG 
EC 
BU au 
NQ 
PL 
BQ 
BT 
ID 
AT 
NL 


RP 
EH 
IL 
AQ 
AG 
ET 
BH 
BP 
SQ 
BG 
IC 
PG 
PC 


BT 
EG 
IH 
OP 
RG 
AP 
EP 
OQ 
KU 
PP 
AH 
AL 
AN 
NP 
KD 
AU 
IH 
AG 
Sf.! 
AQ 
PM 
NQ su 
BU 
ED 
OP 


AT IC 
OD 
BH 
KC 
AU 
BU 
PC 
SH 
IIJ 
BG 
BP 
KG 


OQ 
BD 
KH 
BT 
PD 
FU 
AT 
KQ 
AG 
Qi' .. J ou 
ED 
NP 
EU 
AH 
KC 
NC 
BQ 
EC 
PH 
BH 
BL 
IG 
BU 
AU 
PC 
IP BG 
KD 
OC 
IH 
NQ 
SG 
AP 
PQ 
SM 
SL 


Figure 9-B(J) c/Preparation of Ciphertext for rizgraph!c frequency distnbutzon ( ['). 


D 
G 
T 
H 
l1 
u 
Q 
associated and disarrnngeJ and do not lmve internal 


plaintext ,-alues. Thu,.;, the pmees,; of matching 


the profiles ,,·ill re,.;ult in the eonstmction of the 
matrix to its original dimension and the reassociu- 


tion of the variant values. In this pro.l'ess, the analyst 
should be alert to ·the possibility that some ,;ysfem 


may have been used in assigning the row <llld column 
indicators. If tnis is the case, a short cut can hasten 


the final solution. 
(1) Examination of the digraphic frequency 


distribution shows four row8 which have pronounced 


profiles; they are rows . t, B, E. and F. At fir,;t 


glance rows B and F appear similar, but a closer 
examination shows a discrepancy between the fre- 
quencies for FT. FH, P.i.\1. FC FQ, and BT. BH. 


BA1, BU, and BQ. Therefore. this match is rejected. 


Considering a match between rows . t and B. a 
much closer eorrespondenee in frequencie,; is noted. 


thus they may be accepted as a match (fig. 9-9). 


Figure 9-8® r/(. Digraphic frequency distribution ( U). 
L 
P 
C 
D 
T 
T 
H 
!f 
r.; 
Q 


b. A study of the freqnency profile may begin 
with either the ro,vs or columns. In either ease, it 
is usually better to start with the one whieh has 


the most pronounced profile, seek a match for it, 
and then move on to the least pronounced. By this 
process of elimination, even the least charaeteristic 
profile ean usually be matched. Note, however, that 
the digraphie frequency distribution represents the 


original· eneiphering matrix in an expanded form 
because its row and column indica tors are dis- 


A 
B 


Figure 9-9 ( ~. Match of rows A and B (C). 


(2) Because the affinity of rows E to F is not 


particularly negatively or positively pronounced, 
they may be momentarily dropped from eonsidera- 


tion Scanning the rows again. it is quoted that 0 
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exhibits an affinity for columns, P, 0, D, and again 
for M, U, Q. Excluding rows A. B as previously 
matched, the only other row indicators shown in 
combination are the column indicators Q, N, K, F, 


and S. S can be rejected due to its low profile; K 
has a similar but weaker affinity for U and Q, so it, 
too, may be rejP.d.ed. This IP.aves F and N for pos-. 
sible matches to 0. Of the two, N seems the most 
logical as both N and 0 are combined frequently 
with P and Q, while F has no high-frequency eom- 


bination in common with 0. The matrix now appears 
as shown in figure 9-10. 


L P C D G T H U U Q 


A 
B 1111111111 I 


H 


0 
1111111111 I 


Figure 9-10 (t). Matching rows Nand 0 inserted (U). 


c. The rows above are relatively ~asy to match. 
Rows A and B are matched because of their pro- 
nounced profile, and N and 0 because of similar 


affinities to specific column indicators. Another 
method of determining a match involves computing 
a separate value for each trial match of a row or 
column against the remaining rows and columns. The 
value of each match is derived by multiplying the 
two values contained in adjacent cells of each arbi- 
trary match, and summing their products. The match 


having the highest value may be presumed to be 
correct. For example, E row can be compared to the 
following three possible matches, as shown in figure 
9-11. 


E 


F 


E 


.i{ 


E 
I 


L 
p c 


0 
1 
2 


0 
1 
2 


0 
1 
4 


0 
1 
2 


0 
0 
2 


0 
0 
l, 


0 
1 
2 
1 
1 
3 


0 
1 
6 


D 
G 


3 
2 
2 
l+ 


6 
13 


3 
2 
3 
1 
9 
2 


3 
2 
2 
2 
6 4 


T 
H 


1 
1 


0 
1 


0 
1 


1 
1 
l) 
1 


0 
1 


1 
1 


0 3 


0 
3 


11 u Q 


0 
1 
0 


1 
1 
1 


0 
1 
0 


0 
1 
0 
0 
1 
0 
0 
1 
0 


0 
1 
0 
0 
0 
0 
0 
0 
0 


Figure 9-11 (C). Possible matches of rowE (U) . 


= 21 


=17 


= 20 


(1) While all matches are fairly close, the match 
of rows E and F may be tried first. This test, however, 
as all tests, is susceptible to error. Xotiee how in the 


above a small difference in combinations <:o1t!d re,.;ult 
ir, E being almost equally \\·ell rnatchecl to K or /. 
(2) By a process of elimination. with only fonr 
unmatehed rows left, further matehing is quite 


simple. R and 8, both "ith extremely low profiles, 
are obvi.ous matches, lea\·ing I and r.;.- to be matched. 


At this point the matrix appear-; ;,,.; in tigme 9-12. 


L P C 
[J 
c 
( 
,.. 


J 


lA 
Tl 
i 
/..) 


A B 


E F 


I K 


N 0 


R S 


Figttr~ U-t: ~· r:o.•nplctinn of ron· nwtchcs (f"). 


d. The column indicators conld be mat('hed by the 
same process used for matching the ro\\- indicators. 
This, however, shonld not be ·nece,;sar.\·. :\ ntice the 


pattern of the row variants: i.e . . tB follo\\·s ,;equen- 


tiully as does E and F'. with a space for t \Hl letters 


bet\\·een. This space is possibly for C and D. which 
appear as column n1rinnts. Tillis. (' and n mny 


represent a match. This possibility is quickly con- 


firmed when the column profiles of the t\\·o are 


inspected. Assuming a consistent pnttem. the matrix 


can be reeovered as seen in figure 9-13. 


A B 


E F 
I K 
N 0 
RS 


c 
G 
r ,, 
p 
,, 
j, 
- 
..... 
....... 


Figure 11-t:J ((A. ;llatrix with both ro1cs and 
rclu:nns matched (C). 


e. Annly,;is of the cryptogram lw:nllld thi,; point 


follm\·s the ,.;arne technique,; as those lt...;ecl in the case 


of 
simple 
multiliteral 
systems. 
The 
digm phic 
variants are reduced to uniliteral term,.; by inserting 


an arbitrary plain sequence in the matrix. A. distri- 


bution is made, and a st.ucly of the frequencies of 
letters and repetitions of patterns in the pseudo- 
plaintext begins. 
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9-11 . ~somorphic Characteristics in Dete~mi­ 


- nation of Equivalents 


a. A characteristic of encipherment by multiliteral 
systems with variants is the disruption of isomorphic 


Simple multiliteral encipherment: 
R 
E 
C 
0 
M 


SI CE 
CD 
EG EI 
A 
B 
C 
D 


patterns in the plaintext. This disruption may be 
seen in the encipherment of the word RECOM- 


MENDED by the two systems illustrated in para- 
graph 9-2 (fig. 9-1) and example 3 in paragraph 9-3c 
(fig. 1-3). 


M 
EJ 
D 


E 


CE 


A 


N 
ED 
E 


D 


CG 


F 


E 


CE 


A 


D 


CG 


F 


Multiliteral with variant encipherment: 
R 
E 
C 
0 
M 
M 
KK JA DB CA 
IC DL 
E 
MJ 
N 
AG 
D 
IF 
E 
JA 
D 
DJ 


b. For all practical purposes, the isomorphic pattern 
of the plaintext word clearly reproduced in the first 
encipherment is completely extinguished by the 
second method of encipherment. If the text of a given 
variant system is scarce, and if all possible variant 
values are fully used and wholly independent of one 
another, the solution can become exceedingly difficult. 
However, in practice this situation is rarely en- 
countered, as practical military communications are 
such that a sufficient volume of text is usually avail- 
able to provide a basis for establishing equivalent 
values. To illustrate the possibilities of determining 
equivalent values by a study of isomorphic repeats, 
_consider the example below, each set being a series of 
different numeric ciphertext values of one underlying 
plaintext word or sequence of letters. Note that 
although these repeats are useful for analysis they 
first must be isolated from the text as representing a 


probable word or phrase. Usually this occurs in the 
cases where stereotyped beginnings or endings are 


used. In this case, the examples are arbitrarily 
selected for the purpose of illustration. 


Set A 
(1) (2) (3) (4) (5) (6) 
(7) (8) (9) 
12 37 02 79 
68 
13 03 37 
77 
82 69 02 79 
13 68 
23 37 35 
82 
6.9 
51 
16 
13 
13 78 
05 
35 
91 
05 02 01 
68 42 78 37 
77 


Set B 


(1) 
(2) 
(3) (4) (5) 
(6) 
(7) 
71 
12 02 51 
23 05 
77 
11 
82 
51 
02 03 05 35 
11 
91 
02 02 23 37 35 


.97 
12 
51 
02 78 
69 
77 


c. Examination of individual cipher sequences in 
each set shows no isomorphic pattern other than a 


few scattered repeats. However, inspection of the 
columns formed by the superpositioning of the cipher 
sequence reveals Lhat in columns (3) and (4) of set B, 


the dinomes 51 and 02 are used exclusivelv and inter- 
- 
~ 
changeably. In column (3) of set A, the dinomes 51 
and 02 are also used interchangeably, but in column 
(4) different dinomes appear. A close study of each 
column leads to t.he acceptance of the following 
groupings ns possible equal cipher eq ni Vttlents: 


12 37 02 79 
68 
03 
77 
71 
82 69 
51 
16 13 23 35 
11 
91 
05 
01 
42 
78 
97 


d. The equivalent values derived above may be 
assigned arbitrary values to reduce them to uniliteral 
terms. Thereafter, these equivalencies may be used 
to find additional sets of equivalent valnes in the 
ciphertext. The analyst may recover plaintext letters, 
by applying the method of the ttnalysis of probable 
words and word patterns, and then proceed to 
analyze the uniliteral terms in that light. For example, 


the sets of cipher equivalents could be rednced to the 
following word pattern: 


Set A 
(1) (2) (3) (4) (5) (6) 
(7) (8) 
(9) 
12 37 
02 79 
68 
13 03 37 
77 


82 69 
02 79 
13 
68 
23 37 
35 


82 69 
51 
16 
13 
13 
78 05 
35 


91 
05 
02 01 
68 
42 78 37 
77 


A 
B c 
D 
D 
E 
A 


Set B 
(1) (2) (3) (4) (5) (6) 
(7) 
71 
12 
02 
51 
23 
05 
77 


11 
82 
51 
02 03 
05 35 
11 
91 
02 02 23 
37 35 


97 
12 
51 
02 78 
69 n 


A 
A 


e. Besides the isomorphic pattern of the words 
themselves, the indication that certain letters are the 
same is of value in determining the exact words 
these patterns represent. The fact that the dinomes 
of column (3) in set A and those of columns (3) and 
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(4) in set Bare similar was previously mentioned. An 
examination of the grouping of possible cipher 
equivalents also shows that the last three letters of 
both words have the same plaintext value. Using the 


- 
A B C D D E A - 
A R T I L L E R Y 


f. The determination of equivalencies may appear 
to be an easy matter, as is their extension to probable 
words. However, it may be very difficult, as the 
cryptanalyst can never be certain that a set of cipher 
sequences showing what appears to be the use of 
variant values to encipher the same plaintext word 
or phrase is correct. There is always the possibility 
that they are parts of different plaintext sequences. 
For example, the cipher sequence on the surface 
represents the same word with two variants appear- 
ing in the first position. 


17 82 31 
82 14 
63 
27 
82 40 82 
13 63 


However, it could as easily represent the different 
words MANAGE and DAMAGE or other similarly 
constructed words. 


9-12.foAnalysis of lsologs 
a. Occasionally in military communications, a 
situation occurs where one plaintext message is 
enciphered in either. two different systems or vari- 
ations of the same system. The cryptogram thus 
produced, differing in ciphertext but having the same 
underlying plaintext, is termed an isolog. Isologs, no 
matter how produced, are among the most important 
means available to the cryptanalyst in solving a 
cryptogram. In some instances, isologs are the only 
practical means of entering systems which offer no 
other clues. Such an entry proves useful in multi- 
literal systems .employing variants where conditions 
preclude the application of techniques previously 
discussed. 
b. Normally an isolog is recognized by equality, 
or near equality, of length of two or more messages. 


An isolog may be suspected where this similarity of 
message length is noted. However, before accepting 
this cordition as fact, a confirmation in similarities is 


sought in those elements pertaining to handling and 


transmission of the message, such as, serial numbers, 
originators, etc. Also, if the isolog is generated by the 
use of variations of the same system, a few scattered 
repeats may be noted throughout the message. It is 
an isolog of this nature that provides a means of 
solving multiliterals with variants. 
c. Regarding the analysis of isologs and isologous 


word patterns and the expected ,;imilarity of letters, 
a word pattern list can be scanned for words which 
conform to these conditions, resulting in the discovery 
of the words: 
- 
- 
A A - 
B A T T E R Y 


segments of multiliterals with variants, the technique 
employed is only an exten,;ion of the methods used 
in the determination of equivalent values by a study 
of isomorphic characteristics. The only difference is 
that in this case the whole message as an isolog, or 
large portions of it as isologous segments, are studied. 


~{oreover, the study of word patterns and the deriva- 
tion of probable words ·may involve whole phrases 
rather thnn individual worrls. 


d. Given two messages suspected of being isologs, 
a digraphic distribution is made for each in figure 


9-14(D and 9-14® and examined for any character- 
istics which might aid in the analysis of the cryp to- 


gram. The messages and their respective distributions 
follow. 


!1essage A 


A 


B 


c 


D 


E 


F 


G 


1 


2 
3 


4 


5 


6' 


7 
8 
.} 


p 


82265 
iJ3103 
74839 


32529 
70115 
802?7 
94000 
13828 
54082 


63629 
33918 
431{:;8 


26458 
45039 . 81713 
73309 
20749 
617;:;2 
38728 
91147 
;)9826 
13365 
33881 
896J7 
51750 
57074 
11804 
28120 
27730 
311D9 


27865 
60653 
;)0870 
46594 
198;:;~ 
1J822 
4C72J 
36245 


1 2 3 4 5 6 7 8 9 7 


2 1 1 1 2 1 - 1 1 2 
1 1 - 1 1 2 2 2 1 - 
2 2 - - 1 1 - 5 2 2 
1 1 1 1 2 2 1 1 1 - 
1 1 2 1 2 2 - - 1 1 
1 3 1 2 1 - 1 1 1 - 
1 2 1 2 2 1 1 1 1 1 
2 2 1 1 - 1 2 1 2 2 
1 2 2 1 - 1 2 2 2 1 
2 1 1 1 1 2 1 2 - 
2 


6'9842 
89106 
400C:j 
81048 
02038 
16476 


41468 


J381tJ 
432;:;iJ 
72J62 
4J867 
22D87 


Figure 9-140 (r/l. Digraphic frequency distribution, message 
/' 
A (U). 
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Message B 


5 
10 
15 
20 


A' 
301:50 
87497 
14511 
97360 


49676 
50106 
45647 
99181 


B' 
69672 
53889 
41563- 
25203 
90628 
77536 
203b1 
10570 


C' 
89277 
75011 
351J9 
90138 


99974 
50232 
0411;5 
89216 


D' 
38463 
17547 
14648 
00646 
85864 
53898 
26121 
83878 


E' 
94889 
33728 
11272 
20504 
06484 
32103 
9871;5 
42662 
F' 
80760 
89880 
44105 
52900 


59728 
22855 
87300 
70893 


G' 
57682 
462b3 


1 2 3 4 b 6 7 8 9 p 


e. As both dinomic distributions reveal a random 
sea ttering of ·freq ueneies with no single pronotmeed 
pattern in either row or column, multiliteral s::-;tems 
with variants may be assumed for e<tch. Further, 
<llthollgh the distributions are flat, the:v :tre \·ery 
,;imilar in respect to the location nf both hlaitk-; <tlld 
points of high frequency. It nwy. therefore. he tenta- 
tileh· ;tssumed that the two me,;,;ages are \·ariation,; 


of one ,;ystem. An examination of each me,,;age 
reveab no single outstanding dwraeteristic 11·hich 
indicates the underlying plaintext or system of 
encryption. Therefore, the messages may be com- 


pared to each other to determine if any sttch pattern 


exists, and to further their identification as i,.;ologs. 


This is done by inscribing one abun the other. 


assi!.ming row and column coordiiwtes for reference 


purposes. Because the system invnh·ed j,.; nwltiliteml, 


the text is arranged in dinomic elements. ;ts ,-ho\l·n 
in figure 9-15. 


1 
2 


3 


4 


5 


6 
7 
8 


9 


~ 


4 1 - 
1 1 - 
1 2 - 
1 - 1 
1 1 1 
- 3 - 
1 1 1 
1 1 - 
1 1 2 
2 1 2 


2 
1 
- 
1 
1 
2 
1 - 
1 
2 


1 1 - 
1 2 1 
1 2 2 2 1 1 
2 1 1 5 - 
2 
3 2 1 1 1 - 
2 1 - 1 2 1 
1 - 2 1 1 1 
2 1 1 1 1 1 
1 1 2 1 2 3 
- - 2 3 2 1 
2 3 1 3 - 
1 


Figure 9-14@ r/. Digraphic frequency distribution, message 
B (U). 


5 
10 
15 
20 


A 
82 26 56 31 03 74 83 J6 JB 
;~ ~~ 52 97 01 15 80 27 78 21 06 


A I 
30 15 08 74 97 14 51 1J ?S ~J ~J 67 65 01 16 45 64 79 91 81 


B 
. 94 00 01 38 28 54 08 21 
0~ ~~ ~.: 6~ 93 39 18 43 15 88 10 48 
B' 
69 67 25 38 89 41 56 32 
~~ ;z J" 62 87 75 36 20 35 11 05 70 


c 
26 45 84 50 39 81 71 35 25 33 ?J 30 92 07 49 61 75 21 64 76 
C' 
89 27 77 50 11 35 19 99 01 J3 JJ J7 4~ 02 32 04 11 58 J2 16 


D 
38 72 89 11 47 90 02 64 14 68 13 3C 53 38 81 89 69 ?J 38 
1~ 


D' 
38 46 31 75 47 14 64 80 JU 
~~ Cu 86 45 38 98 2C 12 18 38 78 


E 
51 ?5 05 ?0 ?4 11 80 44 32 v~ 28 12 02 ?? 30 31 1J J? JJ U2 


E' 
J4 88 93 37 28 11 27 22 05 04 JC 18 43 21 03 98 71 b4 26 
6~ 


F 
27 86 56 06 b3 80 87 04 08 67 46 ~J 41 98 55 10 82 22 22 d? 


F' 
80 76 08 J8 80 44 10 5;5 
~9 00 uJ 72 82 28 55 87 30 07 08 J3 


G 
46 72 93 62 45 
G' 
57 68 24 62 53 


Figure 9-15 'Supenmposilwn of 11tessages A and B (U). 
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f. When the paired digraphs formed by the super- 
imposed messages are scanned closely, several 
digraphs are repeated at the same position in each 


message. Some of the repeats are: 


(14) 
(19) 
(6) 
(20) 


A 
01 
91 
E 
11 
62 
A' 
01 
91 
E' 
11 
62 
(4) 
(12) 
(15) 
B 
38 
62 
F 
55 
B' 
38 
62 
F' 
51 


(4) 
(10) 
(4) 
c 
50 
38 
G 
62 


C' 
50 
38 
G' 
62 
(1) 
(5) 
(14) 
(19) 
D 
38 
47 
38 
38 
D' 
38 
47 
38 
38 


The repeated occurrence of the same dinomes in 
both messages at the same relative position, ahntys 


paired and also coupled with the similarities in the 
frequency distribution, is strongly indicative that 
the messages are produced from the same encipher- 
ing system. The fact that certain values are paired 


\Yhile 
the intervening dinomes between appear 


random mttY be explained by the assumption that 


the system provides a number of variants for high- 
frequency letters and few or none for lo\v-frequency 
letters. Thus, the plaintext value for the dinomes 


paired in both messages could be low-frequency 
letters. Further, if this is the case, the dinomes 
appearing in both messages between a set of pairs 


must then represent the use of variant values to 
encipher the same plaintext sequence. 


g. Using the foregoing assumption as a base, it is 
possible to form a chain of possible equivalent values 
by equating dinomes to each other. For example, the 
first six sets of dinomes of each me,.;sage may be 
written vertically a,.; follows: 


.\Iessage A 
A' 
82 
30 


26 
15 
56 08 


31 
74 
03 .97 


74 
14 


As it has been assumed that these dinomes are equal 
values for the same plaintext letters, it then follows 
that if any one of these are found paired with 


another dinome then it too must represent the ,.;arne 


value. For example, in position A A' (4) and (6) the 
paired dinomes 31 7 4 and 7 4 14 are found. If 7 4 is 


related as equal in plaintext value to 31, 14 must 
also be equal in value to 31 and 7 4. Thus a sequence 
of 31 7 4 14 may be desired. By continuing the 
same chaining process on a reciprocal basis (possible 


because both messages are enciphered by the ,.;ame 


matrix), the following chain of eq1tal vallle,.;, figllre 
9-16, is derived, arrnngecl in order of leugth. 


OG 14 15 26 28 31 
3~ 73 74 81 8D J8 J~ 
02 07 20 22 43 44 63 90 


12 37 48 51 6J 70 83 J4 
03 30 41 54 65 82 97 
05 10 24 32 4D 87 DJ 
lC 18 36 76 78 79 BC 
27 45 53 64 80 92 


11 39 75 88 
21 58 77 84 
46 59 68 72 


00 52 67 


04 55 61 


08 29 56 


19 71 96 


01 25 
13 85 


42 60 
38 


47 


50 
62 


91 


Figure 9-16 (C). Chain of equall·al1us rC). 


h. The equiYalent values produced hy tht• chaining 


process can now be assigned arbitrary lt'tters to· 


reduce them to uniliten1l terms, and t'<tch me,;,-age 


can now be studied on thC'se term:-: . .'\,,t nnly "·ill 


word patterns come to light ,,·hen tiw llllilit•·r;d t<'l'Ili:-: 


are substituted for the dinomes, h11t ;tJ,,, ~inn· tlH.• 
system apparently made pro,·ision for hic:ch-fr,·q tu•ncy 


letters, they in turn can be iden tifit•d by t j,, · Ill Jill ber 


of tlwir variant ,-alues. For exampll'. t!H· fir,t ..Jwin 
above probably equates toE of tht• l'l.ttllt<·xr. l',ing 


the assumed E value and the list of <'q11i1 <ti•·ttl 1 ;dues. 
a sequence> of word patterns and tht·ir ;>:trlt:il plain- 


text values is easily derind. For t•xartlpi•·. 


A 
82 26 56 31 03 74 83 .96 .98 ;J .3.! .)_} .'1{ 01 


A' 30 15 08 74 /J7 
1~ 51 19 73 UO ;.•1 ,,-;- 1;,; 01 


p 
- 
E 
- 
E 
- 
E 
- 
- 
E 
- 


A B C B A B D E B F 
( ; I! A 


Then, comparing this to a list of \\·nnl p:tll<'l'll'-'. ,dl 


the other plaintext nllues could be dt·ll·rtliiiH'tl. For 


examplP, the first eight lettt•rs of the pat t nn probably 


mark a whole word. A similar pattern 11 h j, h clltl t a ins 
an E in the appropriate positions is the '', >rd [{ E FER- 


ENCE which can easily be expanded to REFE RE.'\CE 
YOUR for the whole isolog-ous seqw'IH'I'. \\'ith a few 


known values for the arbitrary unilitt•ral t•·rm, the 
solution of the remninder of the nws,.;agc poses no 
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particular difficulty, and the enciphering matrix 
could be recovered as shown in figure 9-17. A word 
of caution though, this method is not always 100 per- 
cent certain. In some cases mistakes made in trans- 
mitting or copying the message and also the lack of 
values may prevent the chaining process from being 
carried through. 


1 
2 


3 


4 


5 


6 
7 
8 


J 


~ 


1 2 J 4 5 6 7 a a ~ 


D N H E E A - A c 0 


I T - 0 N E s E F T 
E 0 - - 
E A N B D R 
R y T T s L v H 0 - 


N U s R p F - I L X 
p w T s R - u L N Y1 
C L E E D A I A A N 


E R N I H A 0 D E s 
G S 0 li - c R E E T 


r~ T R p 0 E T F - u 


Figure 9-17 (C). Reconstructed matrix (U). 


By manipulating the rows and columns, a diagonal 
arrangement of the plaintext values can be obtained 
as shown in figure 9-18. 


7 
1 


3 


8 
9 
2 


~ 
5 


6 
4 


6 8 9 1 5 4 3 7 2 p 


A A A c D E E I L II 


A A C D E E H K n 0 
A B D E E H ,J H 0 R. 


A D E E H I H 0 R Sl 
C E E G I n 0 R S T 
E E F I H 0 Q S T T_j 
E F I H 0 p R T T u! 
• i 
F I L N p R s T U Xi 
I L N p R s T u w Yi 


L N 0 R S T T V Y Zj 


Figure 9-18 (C). Recovered matrix ( U) . 


Section IV. "'MULTINOMIC SYSTEMS 


9-13. c,) General 


a. Analytically, any distinction between multi- 
literal and multinomic systems, because of the use 
of alphabetic or numeric values as row and column 
indicators, is generally inappropriate. Multiliteral 
systems of the type previously covered employ the 
same principles of cryptography, independent of the 
nature of their row and column indicators. Thus, 
being cryptographically similar, they are susceptible 
to the same analytical techniques of their identifica- 
tion, analysis, and final solution. 
b. There are several systems, though multiliteral 
with variants, which are sufficiently different to 
warrant additional study. These systems use numeric 
values exclusively for the cipher elements, and the 
manner of deriving the cipher element is somewhat 
different from that normally associated with multi- 
literal systems. The systems can be classified as 


multinomics, and the techniques of analysis employed 
are slightly different. 
c. Cryptographic systems which may be grouped 
within this class are the columnar numerical. the 
monome-dinome, and the monome-dinome-trinome 
systems. 


9-14. (ft{ Columnar Numeric System 


a. One of the most simple of the dinomic sy,-tems 


from both a cryptographic and a cryptanalytic pmnt 


of view is a columnar numeric system. Thi~ is a 


multiliteral system because the cipher element to plain 


element ratio is commonly 2 to 1. but it i,; unlike 


the previous systems because the cipher t> le nw n t is 
not derived from row and column coordinates. 


Each plaintext value is assigned several t'ipher 


values arranged in a columnar matrix as dt>picted 


in figure 9-19. 


A B 
C D E 
F 
G H IJ K L M N 0 
P 
Q R S 
T 
U V W X 
v 
.., 
'-' 
08 09 10 11 12 13 14 15 16' 17 18 19 20 21 22 23 24 2b 01 02 03 04 05 01:5 J? 


35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 iJO 26 27 28 29 30 31 32 33 34 


69 70 71 72 73 74 75 51 ;)2 35 54 55 56 57 58 59 60 61 62 63 64 65 6t3 U? 63 


87 88 89 90 91 92 93 94 95 96 97 98 ;)9 00 76 77 78 79 80 81 82 83 84 85 86 


Key: 
TRHP 


Figu.re.9-19 r/columnar numeric system (U) . 


• 


9-16 
SON~ID~NTIAL- 


~ONFIDENTIAt:= 


b. The number of rows of dinomic cipher values 
may Vt!ry as may the system of inscription. Note 
that in the above example, each row of 26 sequential 
letters begins at a letter corresponding to a letter 
of the keyword and is inscribed in its normal pro- 
gressive order. The overall security of the system is 
easily improved by randomly assigning the dinomes 
in each row. However, this entails the loss of its 


primary advantages which are a limited number of 
dinomic strips, each sequential and juxtaposed on 
a keyword that is easy to remember and duplicate. 
c. A message is enciphered by substituting for 
each plaintext value one of its dinomic cipher 
equivalents. For example, a message can be en- 
ciphered with this system as shown in figure 9-20. 


Decipherment is just the reversal of encipherment. 


A I 
R 
R E C 0 N N A I 
S S A N C E 


08 16 26 
24 12 10 48 47 56 35 43 27 61 87 47 37 12 


E S 


73 27 
E N E M Y 


91 99 39 46 85 
A R T I 
L L E R Y 


69 60 62 52 45 54 39 60 67 


A R E 
35 26 39 
B E I 
N G 


70 73 95 56 75 
D I 
S 
P 
L A C E D 
72 43 61 58 45 87 71 39 72 


B A N K 
36 08 99 44 


0 
F 
48 74 


u 0 


47 57 


0 
T 
H 
E 
R 
21 28 42 73 60 


S 
0 
U 
T 
H 
61 21 29 80 15 
R I 
V E R 


60 16 64 12 60 


I 
N D I 
C A T 0 
R S 


95 47 38 52 10 35 62 21 24 79 


I 
N D I 
C A T 
52 56 38 52 71 69 28 


U N I 
T S 


29 56 16 01 25 


T 
0 


28 57 
F A R 
92 35 26 


S 
T 
0 
P 


27 62 48 22 


0 
F 
57 40 


E N E M Y 


39 56 12 98 33 
W I 
T H D R A W A L 


04 43 62 51 11 60 87 31 08 45 


0 
B S 
E R V E 
D X 
21 36 27 39 60 03 73 90 66 


08162 
62412 10484 
75.635 
43276 18747 37125 
25638 


52716 . 92873 
27919 
93946 
85696 
06252 
45543 
96067 


29561 
60125 
35263 
97073 
95567 
57243 
61584 
58771 


39722 85792 35263 
60899 
44487 
46121 
29801 
56016 


64126 
02762 
48224 
75721 28427 
36095 
47385 
21035 


62212 
47957 
40395 
61298 33044 
36251 
11608 73108 


45213 
62739 60037 
39066 


Fi(J'Ure 9-f!O (C). Encipherment using the columnar numeric system ( U). 


d. Analysis generally involves the same techniques 
as the analysis of uniliteral monoalphabetic ciphers, 
with provision made for the fact that a number of 
dinomic sequences are involved. Assuming that the 
dinomes of the system have been inscribed sequen- 


tially, a four-part dinomic frequency distribution can 
be made with each part corresponding to 25 or 26 
progression numbers. For example, such a frequency 
distribution of the message above would appear as 
in figure 9-21. 
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46s-oqso-n-9 


"- 


01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 


~ 


26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 


~=- 
~ 
51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 


76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 00 


Figure 9-21 (U). Four-part dinomic frequency distribution (U). 


e. Each sequence above represents a simple mono- 
alphabetic frequency distribution. This fact, once 
realized, should immediately lead to the next step of 
fitting the distribution to the normal. Note that the 
second and third sequences have the most pro- 
nounced peaks and troughs, and therefore would be 
the sequences to begin with. Once they have been 
fitted to the norm, the remaining sequences fall into 
place as each sequence represents a part of a whole. 


Without referring back to the original cryptographic 
system, the analyst should be able to equate three 
of these sequences to the norm by v--isual inspection 
alone. For example, starting \\·ith the third sequence 


and mentally mawhing an alphabetic sequence to the 


peaks and troughs, it is clear that 51 c= Hp. The same 


type examination of the second sequence shows that 
35c= Ap. These two may be inscribed thusly: 


ABCDEFGHUKLMNOPQRSTUVWXYZ 


35 36 3? 38 39 40 41 42 43 44 45 46 47 48 49 50 26 27 28 29 30 31 32 33 34 


69 70 71 72 73 74 75 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 
f. The placement of the first and fourth sequences 
would be a little more difficult tiDder ordinary circum- 
stances. However, this is not necessary. The sequence 
recovered represents 50 percent of the total system; 
therefore, one-half the text could be recovered, thus 
permitting the assumption of plaintext values for the 
cipher dinomes of the two remaining strips. :\lforeover, 


since each sequence is progressive, the valid assump- 
tion of only one cipher value inevitably leads to the 
placement of all others. 


9-15. <i Monome-Dinome Systems 


a. This type system, one of the more important 


multiliteral systems, differs from others in that it 
replaces constant-length plaintext units \Yith cipher 
elements of variable lengths. The ratios of cipher 
element to plain element may be 1 to 1 or 2 to 1. 
The variation in the ratio is brought about by 


omitting one row coordinate. Thus, some plnintext 


letters are represented by a t\\-o-digit cipher element, 
composed of both row and column inJicators., ,,-hile 


others are indicated by a column indicator only. 
Figure 9-22 illustrates the structure of the system, 
and its application in enciphering 11 me::>sage. 
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Figure 9-21J- rpf. Monome-dinome system (U). 
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Note that in the matrix, blanks appear where the 
blank row intersects columns having as coordinates 
a value used as row indicators. Thus a blank appears 
in columns 4, 6, and 8 above (as 4, 6, and 8 were 
used as row indicators) to preclude confusion in 
decipherment. For example, if a value (A) did 
appear at the intersection Of a blank row and 
column 4, its value would be 4. Since 44c also 
represents 2p, the deciphering clerk would have to 
decide which was the correct value, two A's or the 
digit 2. 
b. Examination of the ciphertext produced above 
reveals two important facts. First, there is a constant 
relationship between cipher and plaintext values 
with no variants. Thus, Ep is always equal to 49c. 
Second, the use of monomics does nothing more than 
confuse identification of this constant relationship. 
For example, the text above divided into 5-figure 
groups would appear thusly: 


59864 98249 83498 28649 43418 48441 36797 
. 84943 39451 67763 @9836 78467 97 


On the surface, the text shows no evidence of which 
dinome or monome represents what plaintext value, 
as the individual identities of the dinomes and 
monomes are lost in the formation of the ciphertext. 
Moreover, because there is a constant relationship 
between a given dinome or monome and a plaintext 
value, it follows that solution of this system lies 
first in isolating the monomes from the dinomes 
and then in identifying each. Thereafter, a solution 
is primarily a matter of reducing the text to uniliteral 
terms and solving it accordingly. 
c. Identification of a monome-dinome system is 
based on the follov,ring characteristics: 
(1) The length of the cryptogram may be 
either odd or even. 
(2) Repeats are consistent in length and struc- 
ture within a message and may or may not be 
divisible by a constant factor. 
(3) Interval between repeats may or may not 
be divisible by a constant factor. 
(4) A monomic frequency distribution may 
reveal two or three digits with a high frequency. 
d. Considering the message and its monomic 
frequency distribution in figure 9-23, the above 
characteristics may be noted. 


A 
B 
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74231 
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20735 
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22b!J"7 


8 i)i:Ji) 7 
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89iJ82 
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3 
4 
5 
6 
7 
8 
9 


r/J 


( 12) 
(27) 
( 19) 
( 4) 
(45) 
( 6) 
(51) 
(24) 
( 17) 
( 5) 


Figure 9-23 (C). Ciphertext and monomic frequency distribu- 
tion (U). 


(1) The disparity between the frequencies of 
each digit in the monomic distribution is obvious 
and indicates that 2, 5, and 7 probably represent 
row coordinates. If this is correct. a matrix similar 
to the following can be drawn up containing a blank 
row 'vith blank cells beneath the column indicators 
2, 5, and 7 
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(2) Using the cipher elements that can be 
derived from this matrix, the cryptogram can now 
be rendered to its correct elemental construction 
as depicted below: 


74-23-1-59-2D-23-57-23-27-2D-1-58-9-55-78-78 


~3-58-2D-73-55-58-23-73-1-78-78-55-57-24-77-57-73-77 


58-79-1-58-72-72-23-73-23-57-78-55-59~23-8-77-78-§5 


9-55-77-57-78-78-9-77-8-78-29-78-8-23-22-9-55-9-9-77 
51-23-8-58-23-8-1-58-1-9-77-58-2D-73-55-58-23-73-77 
58-1-9-9-1-22-58-78-55-57-51-1-9-9-1-78-55-77-57 


78-9-58-23-57-24-9-74-50 


(3) From this point on, if monomes and dinomes 
have been identified correctly, the solution is 
essentially the same as that used for uniliteral 
monoalphabetic ciphers, as a direct relationship 
exists between one plaintext element and one cipher- 
text element, regardless of the latter's configuration. 
As a matrix is involved, the analyst has an additional 
advantage. As the plain values are recovered, they 
may be inserted into the matrix. Assuming that a 
systematic method of inscription is followed with 
a no~mal alphabetic sequence, the route often can 
be assumed, permitting the placement of all values. 
These must later be proved by actual decipherment 
of the cryptogram. 
e. A facet of both above matrices is the marked 
difference in the number of rows and columns; in 
both, the ratio is 4 to 10. This made possible the 
distinction between row and column indicators 
through the use of a monomic frequency distribution. 
Were the matrix to have an equal number of rows and 
columns, for example 6 each, it would produce a 
generally flatter frequency distribution. The occur- 
rence of digits with any great frequency would be 
due to the encipherment of high-frequency letters 
rather than the repeated use of a few row coordinates. 
Thus, the identification of a monome-dinome system 


is more difficult. In such cases, identification some- 
times can be based upon the internal characteristic 
of the text. For example, consider figure 9-24 con- 
taining a message produced by this type cipher and 
its monomic frequency distribution. 
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A 
57357 
29418 
28464 
71715 
82946 
B 
16482 
{;8257 
57482 
84549 
16436 


c 
47364 
84946 
36471 
71616 
49159 


D 
55827 
45646 
26384 
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1 
(9) 
2 
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3 
( 5) 
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(18) 
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,.. 
(13) 
0 


? 
(10) 


8 
(10) 


9 
( 6) 


Figu" : .. ~ 
Ciph" m"'"'' and moo=i' f"quoncy 


distribution ( U) . 


(1) Upon initial examination, the cryptogram 
appears to be digraphic. The primary clues that it is 
not are the absence of the zero in the distribution, 
and the fact that the repeat-ed groups, although even 
digits in length, lie at uneven distances from the 
beginning and end of the message and from each 
other. With nine digits as row and column coordi- 
nates, there could only be a matrix of 20 cells with 
4 rows x 5 columns or reverse, unless one blank row 
indicator is used. A blank row indicator would pro- 
vide for a 5 x 5 matrix of 25 cells which is suitable 
for an alphabet when assuming the I and J, or U 


and V are combined. It is possible to repeat a digit 


~s both row and column indicators, but this would 
be reflected in the frequency distribution by that 
digit occurring more often. Also the 0 probably would 
have been used first before one of the other digits 
were repeated. 


. \' -.~ 


· .. , 
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(2) Having tentatively identified the system, the 
analyst may now attempt the recovery of the matrix 
coordinates. The approach in this case, assuming no 
like-digits were used as row and column indicators, 
is to locate all doublets. Repeated digits, assuming 
the limitation above, are probably the repeated 
occurrence of a dinome derived from the intersection 
of a blank row and a numbered column. Searching 
the text, the doublet 55 is noted. Thus, on the basis 
of the reasoning above, 5 is accepted as a possible 
column indicator (fig. 9-25). 


5 


Figure 9-25 ( U). Initial placement on column indicator ( U). 


(3) A 9 is noted as immediately preceding the 
doublet 55, which is also preceded by a 5. If 5 is 
indeed a column indicator the correct spacing of the 
cipher sequence must be ·5 95 5. Thus 9 can be 
tentatively accepted as a row indicator. If so, then 
9 will appear only in conjunction with other digits 
which are column indicators. Searching the text, 
the dinomes 91 and 94 are found; thus 1 and 4 can 
also be accepted as column indicators. The process 
results in the expansion of the matrix as shown in 
figure 9-26. 


9 1 


1 


I 
I 
I 


4 


1 


5 


Figure 9-26 ( U). E:cpansion of matriz ( U). 


(4) Searching the text again for further pat- 
terns, the first group 57357 is noted. As 5 is accepted 
as a column coordinate, the 7 which follows the 5 
above must be a row indicator. Thus 73 is a dinome 
row and a dinome column indicator respectively. 
Again, a search is made for combinations of 7, and 
73, 72, 71, 75, and 7 4 are found. The assumed can 
now be inscribed (fig. 9-27). 


1 
2 
3 
4 
5 


7 


9 


Figure 9-27 ( U). Second expansion of row and column indi- 
cators (U). 


(5) By a continued inspection of the text, 
working back\vards, i.e. finding a digit which pre- 
cedes an assumed column indicator, all row indica- 
tors can be isolated quickly producing a matrix 
similar to that shown in figure 9-28. 


1 
2 
3 
4 
5 


- 


6 


7 


8 


D 


Figure 9-28 ( U). Final reconstructed form ( U) . 


·with this matrix, the cryptogram can be fractured 
to its individual cipher elements, reduced to uni- 
literal terms, and solved by a method similar to 
that of the preceding example. 


9-16. <f. Monome-Dinome-T rinome System 


a. A monome-dinome-trinome system is essen- 
tially the same as a monome-dinome system with, 
as the name implies, a trinomic element. This ele- 
ment is included as shown in the matrix and crypto- 
gram in figure 9-29. 
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52905 
52559 
09.190 
79071 
80154 
90390 
53900 


Figure 9-29 r./.Example ofmonl)111.e-dinl)111.e-trinl)111.e system (U). 


b. The solution of this system is basically the same 
as that for the first preceding example of a monome- 
dinome system. Identification, again, is usually made 
through the use of a monomic frequency distribution 
which will reflect a high frequency of use for those 


digits used as row indicators. Normally, an examina- 


tion of the text will reveal two of these high-frequency 
digits combined in most cases in the cryptographic 
text. Once the ro\\· and column indicators have been 
isolated, solution again is merely a matter of fraction- 


ing the text into its component cipher elements, 
reduction to uniliteral terms, and establishing the 
plain-to-cipher values. As an aid, the matrix can be 
reconstructed simultaneously. 


9-1 7. <rA T rinomic System 


a. A variant form of the basic multiliteral system 


is the trinomic system in which a constant length 
cipher element of three digits replaces a constant 
length plaintext element, usually of one letter. 
Structurally, the systems are similar in that both 
employ a. matrix \vith row and column coordinates 
and an alphabet inscribed therein. The primary 
difference is that in the trinomic system one set of 
indicators is dinornic and the other is monomic. The 
dinornic element may appear either as rO\\" or colmnn 


indicators usually limited to one position, but it is 


possible to mix them between the two. Further. it is 


possible to use alphabetic values in this system rather 
than numeric values. An example of the normal con- 


figuration of the system using numeric values is 
shown in figure 9-30. 
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16116 
45011 
61383 
16316 
59423 
84385 
723161 
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53817 
22383 
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Figure 9-80 0. Trinl)111.ic system ( U). 


b. Cryptographically, the system offers little. As 
can be seen in the encipherment above, there is still 


the one-to-one relationship between the plain and the 
cipher element. In effect, the system only increases a 
message length by threefold with little increase in 
security. 
c. Recognition of a trinomic system is possible 


through its basic characteristics. They are: 


(1) 
~Iessage length, discounting nulls, is divisible 


by three. 
(2) Repeats are divisible by three. 
(3) Intervals between repeats are divisible by 
three. 
( 4) Positional limitation of the dinorne and 
rnonome indicators make up the trinome. 
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(5) Little frequency deviation is shown on a 
monomic frequency distribution. 
d. An analysis of the characteristic above usually 
suffices to identify a trinomic system and to separate 
it into its component cipher elements. For example, 
observe the message below. 


56712 


43565 


15673 


78734 
01567 


79059 05125 
-- -- 


34756 11257 


47785 90578 


75671 
27905 


- 
-- 


56734 77859 


78990 57853 
85567 90178 
13431 
29901 
90512 53439 
00000 


(1) Each repeat, each interval between repeats, 
each interval between repeats and end of message, 
and the overall message length except for three 
zeros used as nulls, is evenly divisible by three. 
Further, a close study of the group reveals the 
trinomic grouping. For example, the first two lines 
of text can be divided as follows: 


567 
565 


347 


567 


347 


127 905 
347 
561 
785 905 


127 905 


785 900 


905 
125 789 905 


125 785 567 901 


781 
343 129 901 
905 
125 343 
.901 
000 


785 
781 
787 
567 


343 


567 


347 


567 


(2) Having reduced the ciphertext to its ele- 
mental parts, the matrix now can be recovered. 
This .is a simple task due to the positional limitation 
inherent to the system. Note each of the trinomes 


listed above. A close study reveals that each is 
composed of two units: a dinome and a monome. 
Further study also shows that the dinome is limited 
. to 12, 34, 56, 78, and /JO, and the monome to 1, 3, 
5, 7, and 9 respectively. Using these values a matrix 
can be reconstructed as in figure 9-31. 


1 
3 
i:) 
7 
9 


1<:: 


34 


b6 


78 


90 


Figure 9-31 (U). Reconstructed matrix (["). 


(3) With the ciphertext in its ('lemental parts. 
where the one-to-one ratio exist::: and with the 
matrix defined, solution of the message is rapid. 
It would be studied and analyzecl exactly as a 


uniliteral monoalphabetic substitution cipher using 


all techniques associatecl with the solution of that 
type system. 
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POLYGRAPHIC SUBSTITUTION SYSTEMS 


CHAPTER 1 0 </> 


CHARACTERISTICS OF POLYGRAPHIC SUBSTITUTION SYSTEMS 


Section I. cJ CHARAOERISTICS OF POLYGRAPHIC ENCIPHERMENT 


1 0-1 . ¢' 
Gener!ll 
. 


a. The substitution systems dealt with thus far, 
with the exception of the syllabary square and code 
charts, have involved plaintext units of single ele- 
ments. This part deals with substitution systems 
involving plaintext units composed of more than 
one letter, such systems being termed polygraphic. 
Perhaps the reader has noticed the distinction be- 
tween the use of the su:ffLx "literal" and "graphic.'' 


Terms involving literal refer to the oomposition of 
the ciphertext, as in multiliteral systems; terms 
involving graphic refer to the composition of the 
plaintext elements treated. Within this broad classi- 
fication there are distinct systems classified by the 
number of plaintext elements involved in the en- 
cipherment process, the most common of these being 
the digraphic system, which involves a double 
element cipher unit. 
b. A major characteristic of the digraphic system 
is that both the cipher and the plaintext elements 
are composed of two units, and the two unit::; of the 
latter jointly determine the composition of the cipher 
element. In these systems, since the plaintext units 
jointly determine the composition of cipher elements, 
it cannot be said that any single plaintext letter has 
any one particular cipher equivalent. For example, 
in certain digraphic systems ABp can be enciphered 
as XPc while ACp becomes NRc. Thus the change 
in identity of but one of the plaintext letters acts 
to change the identity of both letters of the cipher 
digraph. The method by which this change is brought 
about will be explained in detail in subsequent 
paragraphs. This joint characteristic of determina- 
tion is indicated ~erscoring the digraphs in- 
volved, thus XPc=ACp. 


c. The primary purpose of polygraphic systems is 
to pro:vide a means of eliminating, or at least sup- 
pressing, the frequency characteristic of plaintext 
letters. In the preceding cipher system, the impor- 


tance of this phenomenon as an "in" to the analyst 
is amply demonstrated. In tlw ca,.;p of uniliteral 


monoalphabetic substitution whNP a direct one-to- 


one ratio is obtained, it \Yas sho\\·n that it coulcl be 


solved quickly by a simple tabulation, applying 
the principles of frequency and Ia w,.; of pro bttbility. 
So it was too in the case of multilitcral substitution 
systems, where several, though constant, cipher 
values could be reduced to uniliteral terms. The 
important point here is that security i,.; not neces- 
sarily a factor of the ratio of cipher t'lenwnt to a 


plain element, nor to the complexity of the ,;ystem, 


but to the total number of variations for pach pos- 
sible value of the system as a whole. 


d. In polygraphic substitution, 
\·nriations are 


introduced into the system through both tht' cipher 
and the plain components. The ftlet tlw t •'ncipher- 


ment can be accomplished by cornbinin?: letters 


serves to decrease drastically the opportunity for 
application of the laws of probability and principles 
of frequency. For example, in a l1H'""''U!<' of 100 


characters enciphered by a unilitPral rnononlpha- 


betic substitution system, there an' onl:· :26 difff'rent 


possible letters that require idL'ntificatiorl. In a 
digraphic system based upon an alpll;dwt uf 26 
letters, there are 676 possible combination:-<. and a 


message of the same length in a di?:raphic ,.;ystem 
would only represent 50, at the \·cry mo:-<t. nf these 
possible combinations. Thus tlw Itt\\·,.; nf probability 
and frequency characteristics han 
;t n'stricted 


range in which to operate. 


1 0-2. (rll Polygraphic Substitution Using Tables 
a. TWe .simplest method of polygraphic :-<ub,;titu- 


tion involves the use of tt table similar to that 


shown in figure 10-1. The operation of the ,;ystem 


is based upon row ttnd column coordirwt"" ;t,; the 


plaintext values, which are replaced by thP cipher 
value .found at their intersection. Thus AGp becomes 


-----f!:A N G"l D 1=: NTI4 L 
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FBc. In those cases where a single letter occurs, as 
for example at the end of a message, encipherment 
as a digraph is obtained by adding a null, preferably 
a high-frequency letter. Words are enciphered by 
dividing the word into digraphic elements, then 
using the plain digraphs as row and column co- 
ordinates to locate the equivalent cipher digraph. 
For example: 


A 


B 
c 


D 


E 


Pt F 


DEFACED 


X DEFACED 


YA NZ CY 


P2 
ABCDEFGHJJK 
FX CH XE yy ZA YG FB CD EF XJ zx 


NY DC NB ZI XX DX 


AH 
AB 


BB 
YA 
AY 


AX 
AI 
AG 
NZ 
L 
AZ 


N I I acf I crl I I I I I . r I 
;bill n H IJjf l 


X 
Y 
Z 
- 
EA DJ FH 


ND 
BF 


AA 


I laAIF£] 
~ 


D 


K 


Figure 1o-1 (C). Reciprocal cipher table (U). 


b. The analyst may have noted that the cipher 
in figure 10-1 is reciprocal, i.e. AGp=FBc and 
FBc=AGp. This particular cipher is deliberately 
constructed in this mamwr for case of use, being 
capable of use in both _the enciphering and the 
deciphering process. Reciprocity is not an essential 
factor, and for purposes of security is usually 
avoided. The overall security of the system above, 


where only one cipher equivalent is available for 
each plaintext digraph, is directly dependent upon 
its use. The security of a cryptogram produced 
through its use is relatively good until such time as 
its overuse permits the isolation and identification 
of the more frequently used digraphs. 
c. A similar system is illustrated in figure 10-2. 
Encipherment of plaintext values is again by the 
use of row and column coordinates. Thus ABp 


becomes EEc. Note, however, in this case the \·ahw,.; 


are nonreciprocal, i.e. EEp=OAc rather than ABc. 
To decipher a message, the cryptographer looks 
outward from the cipher digraph to row and column 
coordinates, thus locating its equivalent plaintext 
digraph. 


A B C D E F G H I 
J 
K L M N 0 P Q R S T U V W X Y Z 


A 
WG EE SN TR IA NL GC HT OI UO AM RP BY KB CD DF PH JJ LK MQ PS QU VV XW YX ZZ 


B 
EG SE TN IR NA GL HC OT UI AO RM BP KY CB DD FF JH LJ MK PQ QS VU XV YW ZX w'Z 


C 
SG TE IN NR GA HL OC UT AI RO BU KF CY DB FD JF LH l1J PK QQ VS ·xu YV ZW WX EZ 


D 
TG IE NN GR llA OL UC AT RI BO KJ.J CP DY FB JD LF MH PJ QK VQ XS YU ZV WW EX SZ 


E 
IG NE GN HR OA UL AC RT BI KO CM DP FY JB LD MF PH QJ VK XQ YS ZU WV EW SX TZ 


F 
NG GE HN OR UA AL RC BT KI CO DM FP JY LB UD PF QH VJ XK YQ ZS WV E'V SW ':X IZ 


G 
GG HE ON UR AA RL BC KT CI DO PM JP LY MB PD QF VH XJ YK ZQ WS EU SV Th' IX liZ 


H HG OE UN AR RA BL KC CT DI PO JM LP MY PB QD VF XH YJ ZK WQ ES SU TV IW /IX GZ 


I 
OG UE AN RR BA KL CC DT PI JO LN MP PY QB VD XF YH ZJ WK EQ SS TU IV Nw· GX HZ 


J 
UG AE RN BR KA CL DC FT JI LO MU PP QY VB XD YF ZH WJ EK SQ TS IV NV GW HZ CZ 


K 
AG RE EN KR CA DL PC JT LI MO PM QP VY XB YD ZF WH EJ SK TQ IS NV GV HW OX UZ 


L 
RG BE KN CR DA FL JC LT MI PO QM VP XY YB ZD WF EH SJ TK IQ NS GU HV Ov! UX AZ 


M BG KE CN DR FA JL LC MT PI QO VN XP YY ZB riD EF SH TJ IK NQ GS HU OV Uw' ~~x PZ 
U 
KG CE DN FR JA LL UC PT QI VO XN YP ZY WB ED SF TH IJ NK GQ HS OU UV AW PX B Z 
0 
CG DE FN JR LA ML PC QT VI XO YM ZP WY EB SD TF IH NJ GK HQ OS UU A V RW BX KZ 
P 
DG FE JN LR MA PL QC VT XI YO ZM WP EY SB TD IF NH GJ HK OQ US AU RV BW KX CZ 


Q FG JE LN MR PA QL VC XT YI ZO WM EP SY TB ID NF GH llJ OK UQ AS RU BV KW CX DZ 


R 
JG LE MN PR QA VL XC YT ZI WO EM SP TY IE ND GF HH OJ UK AQ RS BV KV CW :;x FZ 
S 
LG ME PN QR VA XL YC ZT WI EO SM TP IY ilB GD HF OH UJ AK RQ BS KU CV DW FX JZ 


T 
MG PE QN VR XA YL ZC WT EI SO TM IP NY GB HD OF UH AJ RK BQ KS CU DV F'rl J X LZ 
U 
PG QE VN XR YA ZL WC ET SI TO IU NP GY HE OD UP AH RJ BK KQ CS DU FV JW LX ,'.;z 
V 
QG VE XN YR ZA WL EC ST TI IO NU GP HY OB UD AF RH BJ KK CQ DS FU JV LW !1X PZ 


W 
VG XE YN ZR WA EL SC TT II NO GM HP OY UB AD RF BH KJ CK DQ FS JU LV f.:W PX QZ 
xmnw~~~unnoo~w~~~M~Q~~~wm~~~ 
Y 
_YG ZE WN ER SA TL IC NT GI HO OM UP AY RB BIJ KF Gll DJ FK JQ LS MU PV QW VX XZ 
Z 
ZG WE EN SR TA IL NC GT HI 00 UM AP RY BE KD CF DH FJ JK LQ MS PU QV VW XX YZ 


Figure 1o-2 c./Nonreciprocal cipher table (U). 
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d. Although the table above is nonreciprocal, a 
close examination reveals a certain symmetry of 
values in the inscription of the cipher elements. The 
result is that, unlike the former table, the encipher- 
ment is not truly digraphic in character. Note that 
in the case where the second digit of the plain digraph 
remains constant, the second digit of the cipher 
digraph also remains constant. Thus AAp 
WGc, 
BAp EGc, CAp=SGc, etc.; AAp= WGc, ABp=EEc 
and ACp=SNc. The total result is that the encipher- 
ment cf the first character of the digraph is ahvays 


polyalphabetic, while the encipherment of the last 
character of the digraphs is monoalphabetic in 
vertical encipherment. 
e. Generally, digraphic substitution using tables 
such as those previously illustrated are impractical 
for military use. This is not due primarily to their 
security faults, as this can be corrected, but because 
of their physical limitations. The relatively large size 
of the tables, the inconvenience of their production, 
change, distribution, and handling make their use 
impractical. Moreover, the same, or better crypto- 
graphic results can be obtained by the use of matrices. 


10-3. (rn. Polygraphic Substitution Using Mat- 


l~aces 


a. A simple method for obtaining digraphic sub- 
stitution is through the use of a four7square matrix .. 
This is a matrix which contains four components, 
two cipher and two plain, each inscribed in a 5 x 5 
square. The components are 25-letter alphabets in 
which two letters are combined, normally the I and 
the J (only the I being sh,own), and inscribed in the 
square by some predetermined order. Figure 10-3 


depicts a normal four-square matrix. 


A 
B c D E F 0 u R 
T 


F G H 1/J K L M p Q E 


PI 
L M N 0 
p K y z s N 
C1 


Q R s T u 1/J X w v A 
v w X 
y z H G D G B 


T H 1/J R E A B c D £1 


0 
p Q s N F G H 1/.li K 


C2 
M y z u A L M N 0 
p 
P2 


L 
X w v B Q R s T u 
K G F D .c y w X y z 


Figure 1Q-3 cf). Four-square matrix (U). 


(1) Digraphic encipherment is accomplished by 
locating the first character of the plain digraph in 


section Pl and the second in section P2. The substi- 
tution cipher values are found in section Cl and C2 


respectively at the opposite corners of an imaginary 
square or rectangle. Thus ZAp becomes HEc. This 
is demonstrated in figure 10-4(!). 


Pl 
r:1 


z 
fi 


E 
A 


C2 
P2 


Figure 1 D-4(!) 1). Enciphering operation, four-square 
matrix (U). 


(2) Decipherment is exactly the reverse of the 
enciphering process as shown in figure 10-4@. The 
units of the cipher digraphs are located in section 


C1 and C2 respectively, and their equivalent plain- 
text values are found at the intersection of an 
imaginary square or rectangle in section P1 and P2. 
For example XEc= UBp. 


Pl 
Cl 
A - - - - 
F - u - - 
F - - - - 
- - p - - 
- - - T u 
I X - - - 
- - - y z 
H G - - - 
- - - R E 
A B - - - 


0 - - s N 
F G H - - 
- - 
- - 
- 
- - 
- - - - - 
- - - - - 
C2 
P2 


Figure 1D-4(i) (r/ Deciphering operation four-square 
/'. matrix (U). 


(3) Note that with each successive plain-cipher 
digraphic relationship, a new enciphering rectangle 
is created and outlined. Thus, ,,-hat was previously 
mentioned as the ideal of polygraphic substitution 
now occurs. No individual letter by itself has any 
attached specific value. Rather its value only occurs 
as a result of its combination with another letter, 
and for each combination, different values result. 
Thus in figure 10-4@ AFp=FOc, AHp= UOc, and 


FHp=POc. 


b. It is possible to effect the same type of en- 
cipherment by using a two-square matrix and a 
modification in the method of finding equivalents. 


One such two-square arrangement, a horizontal 


two.,square, is illustrated in figure 10-5. 
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u A N u F 
A u T 0 u 


c T R I G 
B I L E s 
B D E H K 
c D F G H 
Pl 
ICITIRiliU llilliL!t-•101 
P2 


C~ 
R n R H K 
C D F G H 
Cl 
L 0 p Q s 
K N p Q R 
v w X y z 
v w X y z 


Figure 1G-5 ri. Horizontal two-square matrix (U). 


Basically the method of encipherment is identical 
with that of the four-square method, the equivalent 
cipher values for P1 and P2 being found at the oppo- 
site corners of an imaginary rectangle in section 


01 and 02 respectively. Thus :Y1Pp= TLc. The 
exception to this rule is when the two plaintext 
letters appear on the same horizontal row. In these 
cases, the cipher digraph produced is a reversal of 
the plaintext digraphs. For example, the cipher 
equivalent for TEp is ETc. Observe that in both 
cases the first cipher letter is in the same column as 
the second plaintext letter. 
c. Digraphic substitution of the same sort may 
also be effected by the use of a vertical two-square 
matrix as illustrated in figure 10-6. 


M A N U F 
p 1 
c T R I G 
Cl 
B D E H_ K 
L 0 p Q s 
v w X y z 


A u T 0 l•1 


B I L E S 


P2 
c D F G H 
C2 
K N p Q R 
v w X y z 


Figur 
(U). 


(1) The principle of encipherment and deciph- 
erment is once again the same as in the preceding 
example .. The ciphertext values are found at the 
opposite corners of an imaginary rectangle, deline- 
ated by the position of the first and second digits of 
the plaintext digraphs. For example ~lOp become~ 
UAc. In this matrix where the two plaintext letters 
are found in the same column, the cipher digraphs 
are identical. Thus ~lAp becomes JIAc. Note that 
unlike the horizontal two-square, tho cipher equiva- 
lent is not a reversal of the same letter but the same 


letters in the same sequence as the plaintext. 
(2) ·In both the vertical and the horizontal 
two-square systems shown above, the encipherment 
of a single letter can be accomplished only by adding 


a null to form a plaintext digraph. Usually, for 
reasons of security, the null chosen is a high-fre- 
quency letter. 
d. A third method of digraphic encipherment 
using matrices is the Playfair cipher which involves 
only the use of one 5 x 5 square. The use of a single 
matrix is possible by yet another modification of 
the system of finding ciphe; equivalents, which 
results in a greater degree of security. A typical 
Playfair cipher is illustrated below: 


A Q P 0 N 
BRYXM 
G S Z W L 


DTUVK 


E F G H 
I 


Encipherment and decipherment are considered in 
light of four categories of plaintext placement. 
(1) When the members of the plaintext pair 


are at tho opposite ends of a diagonal of an imaginary 


rectangle, the replacement cipher members are t1t 


the opposite ends of the other diagonal. Thus 
AHp=OEc. Note that cipher 1 ahmys i;; seketNl 


from the same row in which plain 1 appettrs: thus 
ZEp=CGc, and BZp=YC'c. 


(2) When the members of the plaintext pair 
lie in the same row, the letters immediately to their 
right form the cipher pair. Thus A.Pp= QOc, 
POp=ONc, and ONp=NAc. 


(3) When the members of the plaintext pair 


lie in the same column, the letters immediately 
below them form the cipher pairs. Thus ADp=BEc. 
CEp=DAc, and EBp=ACc. In both this case and 


that above, the rows and columns form continuous 
circles. 
(4) When the members of the plaintext pairs 


are repeated letters, they must be septHated by 
inserting a null, in this case usually a low-frequency 
letter such as Q or X, and then be enciphered by one 
of the three methods above. For example, the word 
BATTLES is enciphered as: 
BA TQ TL ES 


GB FR KS FG 


A Playfair square is automatically reciprocal so 


far as encipherment by method (1) above is con- 


cerned. Thus A Yp=PBc, and PBp=AYc. This 


reciprocity does not occur in method (2) and (:3) 
above. Dceiphcrmt>nt takes the exact reverst' pattern 


of those fcthods outlined for cncipherment. 


10-4. (1} Variant Forms of Polygraphic Enci- 
pherment 
a. In the foregoing paragraphs, polygmphic en- 
cipherment is totally limited to its digraphic forms 
for which table and matrices are used. It is important 


1o-4 
.e:.nNPIAI='NTI41 - 


CANI=Int:"N"Piln 


that the same basic system is so constructed as to 
provide trigraphic and tetragraphic enciphermen t 
and even combinations of these. In effect, the systems 
operate on the same general cryptographic principles 
with some variation to fit the specific case. 
b. One possible variation of a Playfair square is 
shown below. This illustrates that matrices need 
not always be square, though this is the most 


common form. 


W 
A 
G 
T 
E 
F 


KO KU 


R 
U 


S 
H 
I 
N 


0 
B' 
0 
D 
J KA KE K I 
L 
M 
P 
Q 
V 
X 
Y 
Z 


c. Encipherment of a message by the system 
results in the introduction of an occasional trigraph 
or tetragraph in addition to the normally expected 
digraphs. Thus A).Ip=HKUc and EPp=KEKOc. 


Also a number of variant values may be introduced, 
as CKp could equally be represented by BKEc, 


· KEPc, 'lJI{Jf;, GPc, and TPc. Insofar as deciphering 
the possible variants shown above, the deciphering 
clerk would merely ignore any letters follmYing the 
K when obtained in the process of decipherment. 
Thus CKOp would be read as CK. 
d. A numeric variation of the four-square system 


sho\vn earlier which permits a trinomic substitution 
of digraphic plaintext element1? is illustrated in 
figure 10-7. 


A 
B 
c 
D 
E 
000 
025 
050 
075 
100 


F 
r. 
H 
f 
)( 
1;!5 
150 
175 
200 
225 


Pl 
r. 
~~ 
'l 
n 
p 
2iJO 
275 
300 
325 
350 
C1 


Cl 
R 
s 
+ 
37;) 
400 
42i:i 
450 
47;:, 


v 
>1 
X 
y 
z 
500 
;:,;!;) 
i:ii:IO 
;:,7.., 
600 


p 
1 
2 
3 
4 
v 
Q 
L 
F 
A 
6 
7 
a 
J 
w 
R 
M 
G 
3 


C2 
11 
11 
12 
13 
14 
X 
s 
rr 
H 
c 
P2 
15 
16 
1? 
18 
19 
y 
T 
0 
I 
D 


20 :n 
22 
23 
24 
z 
u 
p 
K 
"- 


Figure lG-7 (C). Numeric variation, four-square matrix (U). 


(1) Encipherment of a message proceeds as 
normal for a four-square system, but the numeric 
values are added rather than used as tetranomes or 
pen tanomes. 


PR oc EE 
DI );"G 


275 
350 
100 
075 
325 
9 
13 
24 
18 
7 


284 
363 
124 
093 
332 


(2) Decipherment is accomplished by deter- 
mining the greatest multiple of 25 contained in a 


given trigraph and then subtracting that multiple 
from the trigraph to derive C1 and C2. 


284=275 284=275+9 275c-9c=PRp 


e. The clumsiness of the two preceding systems 
explains why they are not often encountered in actual 


operations. As stated previously, one of the impor- 
tant requirements of a cryptographic system is that 
it be practical for common usage. ·while the systems 
do provide a degree of extra security, the amount 
gained is hardly worth the effort. 


Section II. (C) RECOGNITION AND IDENTIFICATION OF POLYGRAPHIC SUBSTITUTION 


10-5. (~.Recognition of Polygraphic Substitu- 
tion 


a. The methods of determining whether a given 
message represents a case of polygraphic substitu- 
tion are rather simple. Usually a close inspection of 
certain of its physical characteristics suffices. When 
the techniques do not give clear-cut ans,vers or 
when the lack of volume of text to study makes its 
use inappropriate, the analyst still has recourse to 
statistical tests and identification tables. 
b. Digraphic substitution systems generally ex- 
hibit one or more of the following characteristics. 
(1) Excluding nulls and indicators, message 
length, textual repeats, and internal distances will 
be multiplies of two. 


(2) When the ciphertext is composed entirely 
of letters, all are present, except. one, usually the J, 
the U, or the V. 


(3) If the ciphertext is composed of numbers 
when divided into trinomes, a limitation of range 


occurs, usually 001-676. 


( 4) Repeats usually begin on the odd letters 
and end on the even letters. 
(5) The cryptogram does not yield to a multi- 
literal solution. Thus because of its digrnphic charac- 


teristics, it most likely is digraphic. 


c. In those cases where the ciphertext under 


study is trigmphic, similar general rules apply. 


(1) .Yiessage length, repetitions, and interven- 
ing distance are usually multiples of three. 
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(2) Repetition usually begins with the first 
letter and ends with the third letter of the trigraphic 
ciphertext. 
(3) If the cryptogram does not yield to solution 
of triliteral ciphers, it can be assumed to be tri- 
graphic because of its characteristics discussed above. 
d. Should the above listed characteristics prove 
inconclusive, initial identification may be made 
through the use of the statistical test and table 
which is co;ered in the following paragraph. 


1 0-6. <1> The Digraphic Lambda (X) Test 


a. The digraphic blank expectation test, in all 
respects, except the form of the element treated, is 
the same as that for the monographic blank expec- 
tation test. Both rest on the theory that, given a 
certain length of plaintext and a predictable number 
of blanks, the nonusage of a letter will occur. The 
occurrences refer both to that expected for plaintext 
and random text, and in this test are based on di- 
graphic elements rather than individual letters, as 
was the case of the former test. Again 200 elements, 
in this case digraphs, set the limit of messages which 
may be tested. Tests of messages greater than 200 


elements in length are inconclusive. The digraphic 
test is given in chart form below in figure 10-8. 


660 


640 


620 


600 


580 


560 


540 


520 


500 
0 
~ ~ ~ 80 
~ ~ ~ ~ - 
~ 


Figure 1D-8 (U). Digraphic Lambda (>..) test (U). 


b. Using this chart, identification is based upon 
the number of blanks, where a blank is a nonoccur- 
rence of a digraph, occurring in a cipher message 
not exceeding 200 digraphs in length, in respect to 
the number of blanks, expected in plaintext and 
random messages of the same length. As can be 


seen, the chart contains two curves; curve P refers 
to expected blanks for plaintext and curve R refers 
to expected blanks for random text. In using the 
chart, plot the point of intersection of the vertical 


line (corresponding to the total number of digraphs 


in a given message) with the horizontal line which 
corresponds to the total number of blanks occurring 
in that message. If this point of intersection falls 
closer to curve P than it does to curve R, it indicates 
that the cryptogram is digraphic. If it falls closer 
to curve R than curve P, a nondigraphic substitution 
cipher is indicated. 
c. A cipher which is polyalphabetic and which 
involves only two cipher components gives essentially 
the same results as a cipher .which is truly digraphic. 
For this reason this test should not be used exclusively 
for the identification of a digraphic system, but 
rather to substantiate other evidence. 
d. Where it becomes necessary to distinguish 
between a digraphic cipher and a polyalphabetic 
cipher using two cipher components, a digraphic 
frequency distribution could be made "off the cut," 


i.e. made of those ciphertext digraphs which are 
found by omitting the first letter of text, then 
dividing the remaining text into groups of two letters. 
If the system is digraphic, a distribution exhibits 
a poor 2cpo; if, on the other hand, it is polyalphabetic, 
the 2cpo is as satisfactory as that of a distribution 
made "on/he cut." 


1Q-7. <¢The Digraphic Phi Test (2ct>o) 


a. The computation of the value of 2cpo, 2cpp, and 
2cpr for this test is the same as that given in para- 
graph 9-7 preceding. The difference lies in its use for 
the identification of digraphic systems and the 
interpretation of its resultant values. In digraphic 


systems involving substitution where all the letters 
of the alphabet are used, except the limitation im- 
posed by a 25-cell matrix, the value computed for 


2cpo approaches that of 2cpp for English plaintext 
which is 4.66. 
b. Note again that the results of digraphic tests 
are subject to much \vider variation than similar tests 
for monographic systems. Factors which contribute 
to this are the limited number of digraphs, of a 
possible 625, which may be required to encipher the 
text, and the presence of repeated digraphs in the 
text which further reduce the total number of 
digraphs. The end result is that statistical results 
must be used with caution. 


1 Q-8. ~ 
ldentiAcation of the SpeciAc System 
a. Once the initial recognition of a cipher message 
as a polygraphic cipher has been accomplished, the 
next step preparatory to analysis is the identification 
of the specific system to which it belongs. This 
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identification can frequently be made on the basis of 
certain characteristics of the ciphertext which result 
from the method of encipherment. These individual 
characteristics are listed below. 
(1) Fo'ttr-square ciphers. The identification of a 
cipher message as the product of this system rests 
generally on a process of eliminating other digraphic 
systems as possibilities. This is not to mean that the 
text itself does not exhibit characteristics of its own. 
It does, but the identification of these characteristics 
are not as readily apparent and involve detailed 
study, while the characteristics of the other systems 
can often be noted by a visual inspection alone. 
(2) Two-square system. Two-square systems are 
identified by the presence of plaintext digraphs in 
the ciphertext. Under normal circumstances approxi- 
mately 20 percent of all digraphs produced by this 
system will be plaintext. In the specific case of a 
horizontal two-square system, the digraphs will be 
reversed. In the case of vertical two-square encipher- 
ment, the plaintext digraphs will occur in their 
original sequence. 


(3) Playjair ciphers. A cipher produced by this 
system is generally identified by the complete absence 
of digraphs containing repeated letters. The reasori 
for the absence of repeated letters as digraphs is a 
consequence of the fourth rule of the encipherment 
given in paragraph 10-3d(4). 
(4) Large tables. Because of tho systematic 
arrangement of the internal cipher values in tables 
such as that illustrated in figure 10-2 preceding, 
identification is made by a simple uniliteral frequency 
distribution of tho letters of the cipher digraphs. For 
example, note that any plaintext digraph ending in A 


contains Gc as the last letter of the cipher digraph; 
thus AAp= WGc, BAp=EGc, etc. Other arrange- 
ments which are symmetrical would give similar 
results. 
b. The above examples often allo\Y identification 
by visual :n.;;pection alone. Where this is not possible, 
the analy:;c must study a given cipher in detail using 
procedures which are covered in succeeding para- 


graphs. 
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CHAPTER 11 <I> 


SOLUTION OF POLYGRAPHIC SUBSTITUTION SYSTEMS 


Section l . .f> ANALYSIS OF DIGRAPHIC CIPHERS 


11-1. ~Introduction 
Additionally, any knowledge available to the analyst 
a. The fundamental purpose of polygraphic sub- 
in respect to the subject, possible contents, and the 
stitution is the suppression or total elimination of 
circumstances surrounding a given message are 
the frequency characteristics of ordinary plaintext, 
always invaluable in reaching a final solution. In 
for it is these frequency characteristics which lead, 
any case, when a digraph is used regularly, sufficient 
sooner or later, to the solution of practically all 
messages soon accumulate to the point of solution 


substitutioll: ciphers. The· analysis of cryptograms 
by principles of frequency. In this respect note that 
which are the result of polygraphic substitution 
the "sufficient quantity" varies. In some euses, 


rests upon the basis of the frequency of the units 
where digraphic idiomorphism is pronounced. und 


concerned. If the substitution is digraphic, the units 
when a number of repetitions are available. ,.;olution 


studied are pairs of letters and the normal frequencies 
may be p:actic~l with only_ a few ?1essages. . 
. 
of plaintext pairs become of primary concern. If 
c. In c!IgraphlC systems m particular, the rdentifi- 


the system is trigraphic, the units are sets of three 
catio~ of only a few cipher _digraphs is usually 
I tt 
t 
sufficrent to read out longer portrons of the messages. 
e ers, e c. 
Th' 
· d 
h 
l' · 
· 
I 
d 
h 
I 
. . 
. 
. 
IS IS 
ue to t e Imitation p ace 
on t e va ue 
b. Although analysis IS chiefly a case of studymg 
that can be inserted between those high-frequency 
frequencies, ad_ditional aid is provided by certain 
values normally first recovered. For example. con- 
digraphic idiomorphs, which are the result of the 
sider the following, a portion of digraphic ciphertext 


·particular method of digraphic encipherment used. 
with its recovered plaintext values. 


XQ VO Z I 
ND 
HN LK V L 
IN 


LK AP 


IN 
BN OZ 
S I 


OL 


NT 


BZ 
ON 


d. With a little imagination, the partially re- 
covered plaintext could be expanded to "SECO~ D 
INFANTRY REGIMENT." :VIoreover, if rKc= 


Gip then possibly Glc=CKp, the last portion of 
the message subject "ATTACK." On this basis tht• 


sequence might be: 


"SECOND INFANTRY REGIMENT .\'OT 
YET IN POSITION TO ATTACK." 


Although these values rest on an assumption only. 
their validity could soon be verified; first, by at- 
tempting additional decipherment, and second, by 


fitting the values into the matrix which originally 
produced them. 
e. In a manner similar to uniliteral systems, the 
placement of repeated digraphs at once aids and 
limits the choice of probable words. For example, 
the following repetition extracted from a message 
appears possible as a whole word. 


ZX PV CK IK OL UK AT 
RE 
NT NO 
DYTYLEGI 
TO 


VI FW Hlvf AZ FF FW 
I?n 


In terms of digraphic idiomorph,; it 11·nuld be 


a,;,.;igned the pattern 


- AB--- AB - 


This pattern compared to those listed in 1tppendix 
D \table D-4) reveals several possible 11·ords \\·hich 
,.,11dd be used to form a base for further de\·eloprnent 
of the text, by trying the set of vulnes deri\·ed from 


ea(' h. in turn. 


11-2. (d1 Identification of Four-Square Ciphers 


11. Tfe,general steps and techniques im·oh-ed in 
the analysis and solution of a four-square cipher 
system are demonstrated below. Admittedly, the 


situation given represents a special case in that the 


solution is based on one message. Ho\,-e,·er, the 
methodology remains the same for most cases, 
· CONfiDENTIAL 
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only slight variation being required to fit it to any 
given set of circumstances. The first step in any 
analytic attack is system identification. The follow- 


ing messages illustrate identification 
techniques 
employed in the case of four-square ciphers and 
subsequent analysis. 


UNO NY TPKKM JKZDK JJSGR TGLWR AE2\1Y P 
RCJCP YDEBC DFHMR MKGZA PKPSK MUNO.V 
YTUFE. UUFUE FAYVD AMTDM UDPEY PPYEM 
YPRCJ CPYDE BCDFP SYKNE TJSZO UDRJG 
HMUNE MRUAS SAPSK MRLHS B'ROUN EETUO 
JNNSA RKDEM REFGP EHMDE AMKAJ G E}JQ J 


PTUDB BDGLM FAPSF JPTFF BMDCG TSGPS 


KMTGJ GTJUN BFNJO NUN NT 


b. As a preliminary step, the cipher is tested for 
monoalphabetic qualities by using standard alpha- 
bets and by completing the plain component as 
shown in paragraph 7-12. As negative results are 


obtained, a uniliteral frequency distribution is 
made as shown in figure 11-1 to determine if a 
mixed alphabet is involved. 


. 
==i: 
= 
·-- ~ $$ ~ $ 
~~~ $ ~$ ~% == 
;;&::= 
~ 
-= == 
~$ ~ ~- ~ -~~ ~ 
$.~=~~~~=~~~~-- t- 


ABC DE F 
G HI J 
KL M NO PQR S 
T 
UVWX YZ 


10 7 7 14 16 11 11 14 0 14 12 3 18 14 6 19 2 9 12 12 14 1 1 0 10 3 


Figure 11-1 (U). Uniliteral frequency distribution, four-square cipher (U). 


Although the uniliteral frequency distribution ap- 


pears rough enough to warrant an initial mono- 
alphabetic assumption, closer inspection reveals that 
except for three letters there is really little frequency 
variation, less than might be expected for a message 
of this length. A c/J test could be made if further 
identification is required, but considering the size 
of the sample and its apparent flatness, it is hardly 


warranted. 
c. Having rejected monoalphabetic substitution, 
there is no need to consider transposition, as the 
message is not rearranged plaintext. Digraphic sub- 


stitution is the next logical consideration. For this, 
the ciphertext is divided into digraphic units. Re- 
peats are underlined and inspected for idiomorphic 
characteristics as shown in figure ll-2(D. 


1 
2 
3 
4 
5 6 7 8 9 10 11 12 13 14 15 


A 
UN ON YT PK KN JK ZD KJ JS GR TG LW RA EM YP 


B 
RC JC PY DE BC DF fl1 f PJ.f KG ZA PK PS K.l·f UN ON 


C 
YT UF EU UF UE FA YV DA i,fT Dl1 UD PE YP PY EM 
- 
- 
D 
YP RC JC PY DE DC CF PS YK NE TJ SZ OU DR JG 
E 
~~mw~~~mm~Moo~noo 


F 
~~~~~~~n~~~~~~w 


G 
n®~OOW~~Unff~X~~~ 


H 
Kl>! TG JG TJ UN BF NJ ON UN NT 
-- 
---- 


Figure 11-2@ /Cipher text prepared for analysis (U). 


d. On the strength of the digraphic patterns 
exhibited by the text, divisible by two, and repeti- 
tions consisting of digraphs, it can be assumed to 


be a digraphic cipher. Confirmation of this assump- 
tion can be obtained by constructing a digraphic 
frequency distribution as shown in figure 11-2@ . 
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A 
B c D E F G H I J K L M N 0 
p Q R s T u v w X y z 
- 
- 
A 
- 
3 


B 
- - 
- 
- 
- 
- 
6 
c 
! 


D - 
- 
- 
- 
- 
! - 
- 
10 


E 
~ 
- ·- 
7i 


F - 
- - 
- 
5 


G 
- 
- 
2 
H 
- 
- 
- 
4 


I 


J 
- 
- 
- 
- 
- 
8 
K - 
- 
- 
- 
8 
- 
L 
- 
- 
2 
M 
- 
1 
- 
N 
- 
- - 
- 
5 


0 
- 
- 
5 
p 
- 
- 
~ 
- 
14 
- 


Q 
- 
1 


R - 
- 
- 
- 
- 
- 
- 
7 
s - 
- 
- 
3 
- 
- 
T 
- 
- 
4 
u 
- - - 
~ - 
11 
v 
w 


X 
y 
- 
- 
- 
7 
z - 
- 
2 
7 
1 7 2 10 6 9 0 0 6 4 1 17 
9 1 3 0 
4 s 8 
4 1 1 0 
4 0 


6 
1 4 2 
5 4 6 
5 3 1 8 
3 1 1 0 
4 56 3 1 1 
4 
74 


Flf-1) 
2 
6 
12 4 8 
2 2 
38 20 6 6 
20 2 2 
6 
136 
- 


Figure 11-2® 1'. Digraphic frequency distribution ( U). 


e. The appearance of this distribution shows some 
characteristics of digraphic substitution. Given an 
alphabet of 26 letters, there are 676 possible di- 
graphic combinations. For an alphabet of 25 letters, 
there are 625 possible combinations. Of these, only 
about 300 are used in normal plaintext. In the 
message above, only 74 different digraphs are used, 


602 total blanks assumed. For a message of 74 
digraphs, the normally expected number of blanks 
given by the digraphic Lambda table falls within 


the range 617 for plaintext and 606 for random text. 
With such a small sample as this, the expected 


pattern is liable to be distorted. However. consider- 


ing the number of repeated sequences in such a 


short message and the obvious absence of several 


letters, the nearness of observed blanks to expected 


blanks for random text may be explained in part. 
Furthermore, a digraphic cJ> test reflects the same 
condition with the observed digraphic Phi value 


(2</>o) of 136 surpassing that expected for plain 
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(2<Pp) 
106.95, the expected random value (21/J) 


being 23.25. Note that when a digraph frequency 
table is used, as in figure 11-2® the value of F is 
found in each cell. For example, in the first column 
2 is found for the digraph FA, thus F(C-1) =2X 1 =2 
for this column. To find the total, the total values 
of each coywn are then added. 


11-3. ~ 
~nalysis of Four-Square Ciphers 


a. Accepting the system as digraphic, reexamina- 
tion of the text reveals a doublet, the digraph FF; 
therefore, a Playfair cipher can be discounted. In 
two-square ciphers 20 percent of the total text 
would be plaintext, normal in the case of a vertical 
arrangement and reversed if the arrangement of 
the matrices were horizontal. Failing to note any 
great number of obvious plaintext digraphs, normal 
or reversed, the analyst can assume that a four- 


square system is represented. Accordingly, a matrix 
can be constructed as shown in figure 11-3. Direct 
standard alphabets are used for 12p, as this is the 
normal arrangement, the I and J are combined 
because of the absence of the former in the di- 


graphic frequency distribution. 


A 
B c 
D 
E 
F 
G 
H 
J 
K 


Pl 
L 
M u 0 
p 
I 


Q 
R s 
T u 
v 
i{ 
X 
y z 
I 


A 
B c 
D 
E 
F 
G 
H 
J 
K 


C2 
L 
r-1 
N 
0 
p 


ro 
R s 
T u 
v w X 
y 
,... 
t.. 


Figure 11-3 cJ. Assumed plain component, four-square 
matrix (U). 


Cl 


P2 


(1) Referring back to the ciphertext, the repeat 


PS KiW appears three times at rather regular inter- 


. vals in the text. By position it seems to be a sentence 
separator and being of four letters the word STOP 


is immediately assumed. Thus PSc is assumed to be 


STp and KJ.\fc is OPp. These values are accordingly 
inserted in the matrix, figure 11-4. 


A 
B c 
D 
E 


Pl 
F 
G 
H 
J 
K 
L 
M 
N 
0 
p 
K 
Cl 


Q 
R s 
T u 
1:' 


v w X 
y -z 


A 
B c 
D 
E 
F 
G 
H 
J 
K 


C2 
M 
L 
M 
N 
0 
p 
P2 


s 
Q 
R s 
T u 
v w X 
y 
z 


Figure 11-4 (C). Insertion of cipher values ( U). 


(2) The placement of these cipher equivalents 
allows the assumption of fourth placement by 
position alone. Generally the cipher component can 
be a standard sequence, a mixed sequence, or a 


random sequence. Further it may be inscribed into 
the matrix by a number of different routes. If the 
alphabet is standard, or keyword mixed, it is very 
likely that the last letters, the V-W-X-Y -Z duster 


is undisturbed in respect to sequence, and if so will 
fall at the end of the inscription route. If the route of 
inscription can be determined, these letters can be 
placed with a certain degree of certainty. The direc- 


tion of a route may sometimes be determined by the 
placement of the cluster letters. For example, the 
relative position of Kc and Pc in sequencP Cl can 
be considered in a former light. Xormally, four 
letters separate K and P (K L :\1 N 0 Pl: if normal 
horizontal inscription is assumed for this ,;quare, 


three blank cells are found where four an• n·quired. 


Therefore it can be one of the follo1\·ing coJtditions. 


(a) The route of inscription is ,;omething 


other than normal horizontal. 
(b) That portion of the cipher component 


containing K and P is either mixed or ha,; 11 letter 
missing, the letter being used in the key1,·urd 


(c) Both (1) and (2) are in effect. 
The first option is disproved by a simple collnt. The 
third cannot yet be disproved. In counting. however, 


it is observed that K appears in the 15th pn::;ition 


when normally it occurs at the 11th. Thi,; means 
that four letters normally following it mtt,;t now 


precede it. If this is so, a missing letter het11·een K 
and P would account for only the three cell,; pre,;ent. 


Furthermore, P which normally occurs <tt the 16th 
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position is so located to provide space for only six 
following letters, indicating that four letters nor- 
mally following it now come before. Thus, four of the 
letters shown below must precede the K: 


giving a partially completed matrix as seen in figure 
11-5. 


KLMNOPQRSTUVWXYZ 
- 
- 
1 missing 
4 missing 


(3) Considering which letters can be missing in 
the light of their normal frequency of use may prove 
useful. Between K and P, 0 is probably that missing 
letter since it may be part of a keyword. From P to 
Z: RSTU or perhaps, QU and two of the cluster 


RST may be missing. The choice here with more 
letters, is more difficult. One aspect, however, is that 
the missing letters are probably not VWXYZ. On 


this basis, placements may be assumed as follows: 


P1 


C2 


A B C D E 
F G H J K 
L M N 0 p 


_G. R S T U 


v w X y z 


M 
s T U 
v w X y z 


K 
Cl 


L M N p 
v w X y z 


A B c D E 


F G H J K 
L M N 0 p 
P2 


Q R s m u 
.1. 


v .J[ X y z 


C1 


K 
Figure 11-5 rj. Placement of cipher vahtes by assumption of 


· 
sequence ( U) . 
LMNP 
VWXYZ 


(4) By applying the same line of reasoning to 
the placement of cipher elements in the C2 square, 
the additional placements may also be assumed, 


(5) To this point, assumption has been added 


to assumption, a sometimes dangerous practice but 
one which can be rectified quickly by checking the 
assumptions against the ciphertext, figure 11-6. 


1 
2 
3 
4 
5 
6 7 
8 
9 10 11 12 13 14 15 


A 
UN ON YT PK KM JK ZD KJ JS GR TG Ul RA El•J YP 
YT 
·OP 
RV 


B 
RC JC PY fJB BC DF HM RN KG ZA PK PS KM UN ON 


TY 
RO S'I' OP 
C 
YT UF EU UF UE FA YV DA MT DM UD PE YP PY EM 
- 
- 
YT 
VY 
TR 
TY 
D 
YP RC JC PY DE BC DF PS YK iJE 'l'J SZ OU DR JG 
TY 
ST 
E 
~w~w~~~m~~Moo~~oo 
ST OP 


F 
m~M~m~~n~~~~~rn~ 


ss 
a 
nw~~mn~wnff~OC~%~ 


TT 
ST 
TT 
ST 


H 
KM 'l'G JG TJ UN BF NJ ON UN NT 


OP 
TS 


Figure 11-8 (C). First partial reconstruction of plaintext (U). 


b. No impossible combinations have occurred to 
disprove the assumptions relative to the placement 
of letters in the matrix. However, little insight has 
been gained into the message text. The next step 
then is to build on the digraphs recovered, attempting 
to assume additional values. This can be done easily 
if the positional limitation placed on one member of 
a cipher pair by the other member is considered. For 
example, consider the cipher digraphs P K K111 


located at positions A4 and 5. The positional limi- 


tations in this case are such that PKc must equal 
some combimttion of the row QRSTU of the Pl 


matrix and columns D J 0 T Y of the P2 matrix. 


The location of PKc in tho ciphertext and the re- 
covered values for YTc and K11-Ic ,,·hich flank it, plus 
self-limitation imposed by impressible combinations, 
QD, QT, etc., limits the choice. If a plain value of 


ROp was accepted for PKc, the word TROOP would 


be completed tts a possibility. Thus K can be placed 


in matrix C2. 
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c. Another method of determining values is 
possible, through a study of absolute frequencies 
considered in the light of possible limitations of 
location. For example, the ten most frequently used 
English plaintext digraphs aro: EN, RE, ER, .NT, 


TH, ON, IN, TE, AN, and OR. Referring back to 
the digraphic frequency distributi~m, the digraphs 
E.i\llc, PSc, UNc, and Klvfc are the most frequently 
observed. Again considering the limitation imposed 
by the location of 1lyfc in matrix C2, note that EMc 
can only equal INp or ONp. Hlp and 0:-..fp are also 


possibilities but are discounted by frequency. This 
limitation can be seen clearly in the partially recon- 
structed matrix shown to the right. 


A B C D E 
PI 
J 
(E) 


0 
(E) 
01 


T 
y 


02 
M 
L 
~I N 0 P 
P2 


(1) For the moment, that digraph ,,-ith the 
highest frequency can be accepted, E.Jfc=IXp. 


Another method of determining values is through 
the arbitrary assumption of words conditioned by 
logic, and then testing the values so determined. 
For example, consider the opening line of the 
message with plaintext values previously assumed. 


5 
10 
15 
A 
UN ON YT PK KM JK ZD KJ JS OR TG LW RA E""V: UP 


YT RO OP 
RV 
I~ 


(2) Four elements are present in the plaintext 
sequence above \vhich may lead to the further 
recovery of values. YT is obviously a word bridge; 
therefore, the digraphs U Nc and ONe must repre- 
sent the rest of the word \Vhich refers to TROOP. 


A possible word is ENE:\1 Y, and if this is valid 
there, TROOP probably ends in S. If ENE:-..fY 


is correct, 
then UNc=ENp, and 
ONc=E~Ip. 


This can be tested against the matrix as shown in 
figure 11-7. 


A B c D E 
0 IV 


F G H J K 
E 


Pl 
L M N 0 p 
K 
Cl 


Q R S T u 
L M N p 
v w X y z 
v w X y z 


A B c D E 
F G H J K 


C2 
K L /1 N 
L H .N 0 p 
P2 
s T U 
Q R s T u 
V_ wx y z 
v w X y z 


Figure 11-7 (~. Test of cipher value placement (U). 


(3) Note that again the positional limitations 
of the matrix are such that the assumed values 
can easily be placed. Further, the one empty space 
between the K and 1.11 of the 02 square allows the 
placement of the L. With the additional values, 


more ciphertext can now be deciphered, figure 
11-8. 


1 
2 
3 
4 
5 
6 1 
o 
9 lG ll :2 :3 :w 15 


A 
Ud Oll YT PK i:.f.: JK <;L; ;;J JS GR 'l'G LW i-:;; E/ JL" 
Li! I:?-: YT RO OP 
RV 
L 
B 
RC JC PY DE BC DF ii1;. r::: ;:c 6A PK PS ;:;: i.;:: O:i 


TY 
:;:::; r:;; 
C 
YT UF EU UF UE FA YV [)/,. i:T Dl-! UD PE YP PY E!-. 


YT 
KS 
VY 
TR 
I"; 


D 
~~xn~~IT~n~u~x~~ 


I: 
~~~m~~~~~~M~~~IT 
LP 
:LS 


F 
Jll NS AI? 7.D Ef..' RE FC PE !!.'' DE A;,: ;-.:_,; JG E:. ;~~r 


G 


!! 


GS 
I .. 
" 
PT UD BB DC LM F/,. PS ;:.r PT FF 3f.. :...c C':' sc; i"'S 


TT 
':?L 
S~ 
'I'r: 
S':' 
KJ.; TG JG TJ Ui.' BF i/J O!l Ul.' ."!'!' 
~ 
~ 
D:~r~ 


Figure 11-8 (C). Second partial reconstruction of plain- 
text (U). 


d. Again, little is revealed by the recovery of the 
additional value. However, note the idiomorphic 
pattern of the last seven digraphs. 


AB 
- 
- 
- 
AB 
TJ UN BF NG ON UN NT 


EN 
E:VI EN T S 


(1) By checking this pattern against those 
listed in appendix D (table D-4) digraphic idio- 
morphs, it is found that thP pattern ctm rPpresent 


the word REEI\FORCK\IE.NTS. Note also the 
pattern 


FJ, PT, FF, Row G Column 8, 9, 10 and QJ, PT, UD on Row F-15, G1 and 2. 
TT 
TT 


11-6 
nANII'In.,NTI41 


GONFIDENTIAL _ 


· Assuming the placement of the -:::Jl: to be correct as 
shown below, on the basis of the word T Je =REp 
above, and assuming that TT in each case represents 
. a doublet rather than a word bridge, additional 
values can be derived. For example, inspection of 
the matrix with the J inscribed in its assumed 
position of the C2 square reveals that QJe and FJc 
must equal plaintext digraphs that contain, A, B, 


C, D, orE in the second positions. If Fe is placed in 
the first cell of square C1 FJc would equal B.Ap. 
This in combination with TT, (BATT) would in 
turn suggest a possible word, BATTALION. 
(2) To complete the word, the plaintext di- 
graphs of AL and IO and N- mu~e ~lied. 


Note that the prior placement of FFc=Alp, and 
BMe=IOp which tend to confirm the former assump- 
tion, leaving DCe to equal N-p. By placin:.? the 
D-e on line three of square C 1, it is alined properly 
for the N-p value. Ho\vever, as there are four pos- 
sible cells in which it may fit, it cannot be exactly 


placed. But since it falls on that line, the last cell of 
the second line must contain a C, the letter imme- 
diately preceding the D alphabetically, figure 11-9. 


Pl 


C2 


A B c D 
E 
(F) 0 u 
F .G 
H 
J 
K 
E 
B :Cl 


L 
M I{ 
0 
p 
K 
Q 
R s 
T u 
L 
ivJ 
N 
p 
T 
v w X y 
z 
v w X 
y z 


(J) 
A 
B c D 
E 
F 
G 
H 
J 
K 
(F) K 
L 
M N 
L 
M N 
0 
p 
s T u 
Q 
R s 
T u 


J 
w X 
y z 
v w X y 
z 


Figure 11-9 ~. Insertion of cipher values through 
analysis (U). 


Cl 


P2 


(3) Referring back to the partial sequence 
shown below and comparing the plaintext values 
shown with the partially recovered matrix, another 
possibility is apparent, the word ATTACK. Note 
the plain equivalent for QJe must. end with A, B, 


C, D, or E plain, and that the plain equivalent for 


UDe must begin with A, B, C, D, or E plain, thus 
placing an A on either side of the double T. 


EM QJ PT UD BB 
IN 
TT 
(4) Referring back to the sequence EM Q J 


IT 
P T U D and considering possible equivalent ntlues, 
T'F 


another word is suggested. Note that the plain 
equivalent for QJe must end with A, B, C, D, or 
E. Similarly, the equivalent for UDc must begin 
with the same letter. Thus an A may be placed to 
either side of the doublet (A TTA) suggesting 


ATTACK. Inspection of the matrix ,.;ho\\·s that the 
required values of ACp for UDc can be made by 
placing D in cell one, row one of square C2. The 
Qe can then be placed in cell one of either the second 
or third row, square Cl. In order to derive a K 


plain, the cipher digraph BBc must (•qual K-p. 
Note that the positions of the B-e and K -p arc such 


that Be must appear in the last cell of rows one and 
two of square C2. 


e. At this point the analysis can t<lke one or a 


combination of three courses, all invoh·ing tl'ch- 
tliques previously discussed. The analyst can ttt- 


tempt a recovery of the keyword alphabet 11sed in 
the C1 and C2 squares. He may continue the process 
above, patiently reconstructing plaintext by exttm- 


ining patterns, assuming possible words, then check- 
ing their possibility against the matrix. Tlw last 
method is simply one of attempting to decipher 
additional bits of the message as recon~ry of the 
matrix progresses. For example, using the matrix 
shown in figure 11-10(!) \Yhich incorporntt's n1lues 


previously found, the message can now be deciph- 


ered in part, figure 11-10@, to read as shown. 


A 
B c 
D 
E 
F 
0 u 
F 
G 
H 
J 
K 
(Q) 
E 
B c 
Pl 
L 
H 
N 
0 
p 
(Q) 
K 
Cl 
Q R s 
T u 
L 
M 
N 
p 
,.,, 
J. 


v w X y 
'7 
v w X 
y z 
'-' 


D J 
(B) 
A 
.a 
c 
D 
E 
(B) 
F 
G 
H 
J 
K 
F 
K (L) N 
N 
L 
M 
li 
0 
p 
C2 
IF I K I( LJ I N I N I L I M III I 0 I PI P2 
s T u 
G. 
R s "' u 
.J.. 


v w X 
y 
ry 
v w X 
y 
z 
IJ 


Figure 11-100 (d). Partially recovered four-square 
/ 
matrix (U). 
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A 


B 


c 


D 


E 


F 


1 
2 
3 
4 
5 6 
7 
8 
9 10 11 12-13 14 15 


Uil ON Y1' PK Kl.f JK W KJ JS GR TG LW RA EN YF 


EN Ell YT RO OP(l:O)VE l·lE(liT) 
P.V 
IIi 


RC JC PY DE ilC DF fll.f RM KG ZA PK PS Kl·: UN Oil 
TY 
(ZE)RO S'I OP EN El: 
YT UF EU UF UE FA YV DA NT DN UD PE YP PY £l.;· 
YT AN KS All 
VY 
TR 
AC 
TY IIi 
YP RC JC PY DE BC DF PS YK !IE TJ SZ OU DR JG 


TY 
ST IW(TF.)RE(I:Z)ER(O) 
Jli.f Ull EN RU AS SA PS Kl! RL HS BR OU NE' ET UO 
E:l rr; 
ST OP 
ER 
IE 
JN liS AR KD Ef! RE FG PE Hlf DE AM l'Jl JG EN QJ 
G 


SS 
LE In 
Ili i'lA 
c 
nw~xw~~nnrr~oc~xro 


TT AC KI(iiA)TL(I:A)ST BA TT AL IO 
ST 


H 
Kl;' TG JG 1'J Ull BF dJ ON UN !JT 


OP(SE !;D)RE Eli' FO RC E:·l EII TS 


Figure 11-10@ (C). Partially recovered 1intext (U). 


/ 
Section II. Cf/J ANALYSIS 


11-4. Cf.> ·General 
a, The initial identification and subsequent analy- 
sis of two-square systems is contingent upon the 
recognition of their one primary characteristic, that 


20 percent of all cipher digraphs are in fact trans- 
parencies, i.e. the same as the underlying plaintext. 
In the case of vertical two-square systems, these 
transparencies will be identical with the plaintext 
they represent; while in the case of a horizontal two- 


. square, the transparencies will be reversed. Thus, if 
the examination of one or more cryptograms results 
in the consistent observation of digraphs which form 
good plaintext digraphs they may be assumed to be 
the result of encipherment by a two-square cipher 
system. 
b. The preliminary steps covered in the preceding 
section, that is, the assumption and rejection of the 
system being monographic and uniliteral encipher- 
ment, are followed as a matter of course. After these 
rejections, the ciphertext is examined closely for 
those characteristics given for digraphic cipher 
systems. The normal digraphic tests are conducted 
as required in order to aid in ascertaining whether 
the system is digraphic. Once this has been accom- 
plished, the analyst is again faced with determining 
which specific system was used. 
c. It is usually possible to make a final determina- 
tion as to whether a cipher represents a two-square 
horizontal, or a two-square vertical, by a visual 
examination of the text. Sometimes the structure 
of the system is such that skeletons of \vords or 


whole phrases are readily apparent. However, this 
is the exception to the rule. Without some kind of a 


formal test, it is difficult to specify what constitutes 
a "good. amount" of plaintext digraphs for identifi- 
cation. Such a test is illustrated in the succeeding 
paragraph. 


As several more words are now obvious (shown in 
parentheses) additional values could be recovered 
quickly using the techniques previously sho\vn, the 
solution becoming a mechanical process. 


OF TWO-SQUARE CIPHERS 


11-5. <)I{ Two-Square Test 
a. The test to be described is based upon un 


evaluation of the observed frequency of a given 
ciphertext digraph in terms of its expecteu freqm•ncy 


as a plaintext digraph. Any such correlation as 


might exist between a given plaintext digraph and 


its occurrence as a cipher digraph produceu by a 


four-square, a Playfair, or a large-table system, is 
accidental. But in the case of a two-:-;quare :-;ystem~ 


the correlation is the result of the mechanics of the 
enciphering system. Thus, if a ciphertext digraph 


exhibits only the random expected occurrence, 
considered as direct and reversed tran:-;parencies, 


then that ciphertext may be assumed to be the prod- 
uct of a digraphic system other than a two-square. 


If however, the number of occurrences exceeds that 
random expected value, the ciphertext may be the 
product of a two-square system. Of course the mode, 
as direct or reversed transparencies, in \\·hich this 
greater value occurs, indicates the particular :-;ystem 


used. 
b. To illustrate the procedures involvrd in this 
text, and the techniques of subsequent analysi:-;, 


the following ciphertext, figure 11-11, prepared 
for study, will be used. 


1 
2 
3 
4 
5 
6 
7 
8 
9 10 11 12 :3 14 15 


A 
EO DL EN QB EP EL Q!l fiG P.( DO AQ 
:;~ IL ::z; CI 


B 
Pll TA ilB TB Al: i-!A OI lJC Si:: ::L PC: :;;;· i.'I ;.J 
:--A 
C 
fiN BF GE HL CK TC SE RH RI CD HI UC OI If! i!C 


D 
DE FC PP Ei'vl l!E' YA IP E'l RA ifl-.' QC TI SE s:; ;;;13 
;:: 
GR SP RB SS AB LF HL OR AH OP AI' Q!'; HL PC ;::.' 


F 
OS AH PH SI NB TB All !.JA OI QH i.E i:O :.'!: ES i.'I 


G 
SP BB E!·! LN TA SE Sll YD RK EB ,'!G AI' iV!l A,': Df.' 
h 
NO HL OR AH OP AiTQif AU IP EV FA Hi.' QC TI SE 
r 
~mro~wM~~~~~~~v~ 


J 
BF A/.' KQ SH Qll iiO ER VQ OI I./I' 
-- 


Figure11-11 (C). Ciphertext for analysis (U). 
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CANI="IAI="NTIZll 


(1) Preliminary to a study of the digraphs as 


"direct" or reversed transparencies, the frequency 


A B c 0 E F G H I 1 K L M 


A 
I 


B 
- 
- - 
c 
- 
D 
- 
- 
- 
E 
- 
- - 
F 
- 
G 
- 
- 
- 
H 
- 
I~ - 
I 
- 
- 
J 


K 
- 
L 
1- 
- 
M - 
·= 
- 
1- 


N 
•= 
1- 
I= 
0 
1- 
I~ 


p 
- 
I= 


Q t= - 
I= 


R - - 
-. I= - 
s 
- 
- - 
T I-ii! - - 
I= 


u 
- 
v 
w 


X 
y - 
- 
z 
8 13 9 
2 13 2 0 11 5 8. 2 11 16 


N 


- 


= 


of the digraphs is tabulated using the normal 
digraphic frequency matrix shown in figure 11-12. 


0 
p Q R s T u v w X y z 


15 
- 
4 


1 
- 
6 


t- 
- - 
- 
11 


1 I 


- 
4 I 
10 


- 
41 
0 


- 
2 


3 
- 
7 
- 
13 
- 
- - 
,_ 
1 
.-- 
6 


I= 
10 


- 
7 


r= 
•= 
I= 
- 
15 


9 
- 
- 
3 
- 


' 
- 
- 


2 
- 
11 8 
8 4 
4 
4 
1 
1 2 
0 
0 
1 
1 


Firrure 11-12 (U). Digraphicfrequency matrix (U). 


(2) Once the digraphs have been tabulated, the 
individual digraphs may be listed in alphabetic order 


and tested for their probability as direct or reversed 
transparencies. The format of the test is shown in 
figure 11-13. Column identity is: 


Column 1 Ciphertext digraph 


Column 2 Frequency of digraph in text 
from digraphic frequency dis- 
tribution 


Column 3 Logarithm 
of 
expected 
fre- 
quency of digraph as direct 
plaintext 


Column 4 
Product of Column 2 x 3 


Column 5 Logarithm of expected frequen- 
cy of digraph as reversed 
plaintext 


Column 6 
Product of Column 2 x 5 


~NI:"IF\IFNTIAI 
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(1) 
(2) 


AB 
1 


Ali 
3 
AM 
1 
AQ 
1 
BB 
1 
BE 
1 
BF 
1 


BO 
1 


CK 
1 


DC 
1 
DE 
3 
DL 
1 
DO 
1 
EB 
2 
EL 
1 
EM 
3 
EP 
1 
ER 
1 


ES 
1 
EV 
2 


FC 
1 
GB 
1 
GE 
1 
GL 
1 
GR 
1 


HC 
2 
HL 
6 
liM 
2 
IH 
1 
IL 
1 
IP 
2 
KM 
1 
KQ 
1 
LF 
1 
LH 
1 
LN 
1 
MA 
2 
ME 
2 


l.r! 
1 


t.fL 
1 


HU 
1 
NB 
2 


(3) 
(4) 
(5) 


.45 
.45 
.38 
.25 
.75 
.67 
.61 
.61 
.78 


0 
0 
0 
0 
0 
. 0 


.66 
.66 
.38 
. 0 
• 0 
• 0 


.38 
.38 
.38 
. 38 
. 38 
.13 
.38 
.38 
.13 
. 77 
2. 31 
.88 
. 33 
.33 
• 53 
.63 
.63 
.58 
.38 
. 76 
.66 
. 74 
. 74 
. 79 
.61 1.83 
.72 
.67 
.67 
. 70 


.94 
.94 
.96 
.86 
.86 
.84 
.67 1.34 
.87 
.25 
.25 
.13 
. 0 
. 0 
. 0 


.61 
.61 
.38 
.25 
.25 
.13 
.42 
. 42 
. 48 
.33 
.66 
.61 
.13 
. 78 
.13 
. 25 
. 50 
.13 


• 0 
• 0 
• 77 
. 70 
. 70 
.67 
.48 
.96 
.45 
. 0 
. 0 
. 0 
• 0 
• 0 
• 0 


.33 
.33 
.25 
.13 
.13 
.13 
.13 
.13 
.42 
.78 1.56 
.61 
. 72 
1.44 
.61 
. 0 
. 0 
. 0 
• 0 
• 0 
• 25 
.25 
.25 
.42 
.25 
.50 
.0 


( 6) 


.38 


2.01 


. 78 


0 
0 


.38 
. 0 


.38 
.13 
.13 
2.64 
.53 
.58 
1.32 
.79 
2.16 


.70 


.96 
.84 
1. 74 
.13 
. 0 


.38 
.13 
.48 
1.22 
.78 
.26 
.77 
.67 


.90 


. 0 


. 0 


.25 
.13 
.42 
1.22 
1.22 
. 0 


.25 
.42 


.0 


( 1) 


I1E 


NJ 


NN 
NO 
OE 
OI 
OP 
OR 
OS 


oz 


PC 
PH 
PO 
PP 


QB 


QC 
QH 
QM 


RA 


RB 


RH 
RI 
RK 


RQ 
SE 
SH 
SI 
SN 
SP 


ss 
sx 
TA 
TB 


TC 


TI 
uc 


YA 
YD 


(2) 


1 
2 
4 
4 
1 
5 
2 
2 
1 
1 
1 
2 
2 
1 
3 
2 
2 
3 
1 
1 
1 
2 
1 
1 
5 
1 
1 
3 
2 
2 
1 
4 
2 
1 
2 
1 
1 
1 


( 3) 


.87 
.13 
.51 
.66 
.33 
.13 
.72 
.89 
.61 
. 0 


.13 
.33 
.64 
. 56 


. 0 


. 0 


. 0 


.13 


.80 


.25 
.33 
.75 
.13 
. 0 


.84 
.72 
.77 
.38 
.55 
.67 
. 0 


.74 
.33 
.45 
.82 
.33 
.45 
.53 


(4) 


.87 
.26 


2.04 


2.64 
.33 
.65 
1.44 
1. 78 
.61 
. 0 


.13 
.66 
1.28 


.56 
0 


. 0 


. 0 


.39 


.80 


.25 
.33 


1.50 


.13 
. 0 
4.20 


.72 
.77 
1.14 


1.10 


1.34 


0 


2.96 
.66 
.45 
1.64 
.33 
.45 
.53 


5b."4'2 


( 5) 


.99 
. 0 


.51 
.92 
.58 
.25 
.64 
.74 
.62 
. 0 


. 0 


.13 
.72 
.56 
. 0 


. 0 


.13 
. 0 


.82 
.25 
.64 
.73 
. 0 


.13 
.86 
.38 
.78 
.71 
.45 
.67 
.13 
.83 
.13 
.61 
.73 
.38 
.58 
.13 


(6) 


.99 


• 0 
2.04 


3.68 
.58 
1.25 
1.28 
1.48 
.62 


0 
0 


.26 
1.44 
.56 . 


0 
• 0 


.26 


• 0 


.82 
.25 
.64 
1.46 
. 0 


.13 


4.30 


.38 
. 78 
2.13 


.90 


1.34 
.13 
3.32 
.26 
.61 
1.46 
.38 


.58 


.13 


60.52 


Figure 11-18 (U). Test for probability of transparencies (U). 


(3) As the total value of all digraphs as reversed 


transparencies (the sum of column si..x) is greater 
than that for the digraphs as direct transparencies 
(column five) it can be assumed then that the system 
involved is a horizontal two-square. If the value of 
direct transparencies had been greater, the assump- 
tion would be for a vertical two-square system. 


Under normal circumstances, a horizontal two-square 


produces .0r x 0.3388 reversed transparencies, while a 


vertical two-square produces N x .3610 direct trans- 


parencies. (N in both cases refers to the number of 
digraphs.) In this case, the theoretical value of 
expected reversed transparencies is 4.9126 (145 x 
.3388) which compares favorably with 4.15, the value 
observed as difference between columns five and six. 
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11-6. lcr' Analysis of Two-Square Systems 
a. The ~olution of both the vertical and horizontal 
two-square systems involves the same general 
principles and techniques. Only a slight modification 
in the reconstruction matrix is required to orient it 
vertically or horizontally as the case may require. 
The first step in either case, is to s~t up the recon- 
struction matrix, and to examine the text closely for 
significant characteristics. Where two-square systems 
are dealt with, an obvious quick entry into the cipher 
is by way of the transparencies. If entry can be made 
by this route, other more laborious and time- 
consuming methods, similar to those illustrated in 
the case of a four-square system, may be avoided. 
With this in mind, the text is inspected for possible 
transparencies. 
(1) The following possible transparencies (fig. 


11-14([)) are noted. Although at first glance they 
appear unlikely, consider what occurs when one or 
more digrar-hs of each are reversed, as in figure 


11-14@. 


PH TA 


PH SI 


HL PO 


EM ME YA 


NO ER UQ OI UT 


Figure 11-14® (C). Possible transparencies fr()Tn cipher- 
text (U). 


PH AT 
THAT 


PH IS 
THIS 


HL OP 
STOP 


BU EM YA 
END IT 


ON REQU OI UT 
ON REQUEST 


Figure :.14@ ~ 
~o=le transparenct'es reversed ( [,') . 


The rearrangement of each digraph makes obvious 
a possible word, shown to the right above. Using 


these assumed values, a reconstruction matrix can 
be set up. 
(2) The matrix used should be of sufficient 
size in height and width to allow the free movement 


of the letters and to avoid the establishment of 
false relationships. A dividing line, horizontal or 
vertical as required, will provide for the separation 
of the letters. The placement of the letters within 
the matrix can be determined by their use, i.e. in 
a horizontal two-square transparency they will lie 
on the same row; in a vertical two-square trans- 
parency they will lie in the same column. Thus the 
letters T and A must lie in one row, and I and S 


must lie in another row; and as they appear as 
reversed transparencies, A and I would appear in 
square Pl C2, and T and Sin P2 Cl. All values are 
checked and inscribed in a working matrix and 
appear as shown in figure 11-15. 


Pl C2 
?2 Cl 


A 
T 


I 
s 


E 
t·~ 
I 


0 
~; Pj 


Q 
u 


R 
E 


Figure 11-15_,. Preliminary reconstruction matrix (U). 


(3) With some values assumed in the rows 
of the matrix, the next step is to attempt rearrange- 
ment to obtain columnar order. To illustrate, 
HL PO is assumed to be the cipher value of ST OP; 


thus, encipherment of the first plaintext digraph 


must have occurred in one of the fol!O\\ing positions; 
figure 11-16. 


Pl 
Cl 
or 
C2 
P2 
s 
H 
L 
T 


C2 
P2 
Pl 
Cl 


L 
T 
s 
H 


Ftgure 11-16 </· Analysis of cipher-plain value location ( U). 


Either method of encipherment demonstrates that 
T and H lie in the same column of square P2 Cl. and 
S nnd Lin P1 C2. As both T and Shave been placed, 
H and L can be placed in their respective ro\vs, 


figure 11-17. Note that care must be exercised not to 
place a letter in the same row or column with another 
unless some evidence exists to support this placement. 
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CONFIDENTIAL 
Pl-C2 


L 
A 
T 


I 
s 


E 
!·! 


0 
N 
p 


Q 
u 


R 
E 


s 
H 
' -- 


Figure 11-17 ,!. First expansion of reconstruction 
matrix (U). 


P2-Cl 


(4) With T and H in the same row, the digraph 
pairs PHc, TAc, and PHc Sic can be checked. As- 
suming PHc to be THp, encipherment is possible by: 


P1-C2 
P2-C1 


~I_::_ 
H1H 


Pl-C2 P2-C1 
H:H 
or 
--i-- 
TIP 


In either case it is found that T and P and H and H 
appear in the same rows; that T and Hand Hand P 


lie in the same column. By incorporating this rela- 
tionship with that previously established, the matrix 
will now appear as shown in figure 11-18. 


Pl-C2 
?2-Cl 


L 
A 
T 


I 
s 
I 


E 
M 
i 


T 
0 
p 
N 


Q 
u 


R 
E 


s 
H 
H 
I I 
I I 


Figure 11-18 cl. Second exnansion of reconstruction 
matrix (U). 


Position E7-13 HL 
OR 
AH 
ST 
RO (;\G1 


D7-13 
IP EF 
R .l 


Gl-7 
SP BB 


(1) In the first sequence above, a possible \mrd 


in STRONG POINT is easily visible. In the second 
and third cases, no word is apparent, except pos- 


sibly POSITION in the second. However, note the 


(5) The assumed ENE.MY for the cipher di- 
graphs EM AlE Y A provides a further clue. ~ ote that 
EMc, Ec, and Me lie at opposite corners of a rectangle. 
Thus Ep and :Vfp must lie at the diagonally opposite 
corners. Mp in P1-C2 represents a new placement 
falling below E. Ec of P2-C1, however, has been 
previously piaced, thus when it is moved up to its 
proper position to the opposite diagonal corner, R or 


Pl-C2 of the same row must also be brought up. 
The matrix, 1earranged to show this relationship is 
shown in figure 11-19 


Pl 
L 
A 
T 
Cl 


I 
s 


C2 
R 
E 
0 M E 
P2 


T 
0 M 
p 
N 


Q 
u 


S H 
H 
y 
y 


Figure 11-19 t. Rearrangement and expansion of reconstruc- 
tion matrix (U). 


b. Further analysis of the ciphertext follo11·,; e,;sen- 


tially the same route, with additional ndues being 


provided by the letters already in,;cribed in the 


matrix. For example, using the matrix ab(we it is 


po,.;,.;ible to find the following sequence of partial 


plaintext in the message: 


()p 
A.M QN HL 
PO 
PO (IN)(TS) ST 
OP 


[[J[ QC 
TI SE s.v 
-P (OS)(IT) IO (NS) 
£.11 LN TA SE SN 
E;\ 
AT 
IO (~S) 


,.;irnilarity in the endings. If TIc and SNc are re- 
versed transparencies, the endings produced will be 


,;imilar "TIONS." The possibility of this being 


correct can be checked by referring to the preceding 
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tabulation of expected occurrences of the cipher 
digraph and appendix D (table D-4). Here we find 
the expected occurrences to be: 


Tic 82 
ITc 73 


SNc 38 


NSc 71 


(2) Obviously the results are .inconclusive in 
the case of the reversal of Tic; however, when con- 
sidered with lOp and NSp, the ITc combination 
seems to outweigh its negative value. Moreover, 
an additional test, which is always to be preferred, 
is to try it in the system. Using all values assumed 
in the first case and those above, the matrix now 
can be expanded as illustrated in figure 11-20. 


Pl 


C2 


1 
L 
I 
A 
T 
A 
2 
N 
s 
3 
R 
E 
0 H E 
4 
T 
0 H 
Q 
p 
r; u 
5 S H 
li 
G 
6 
y 
y 


Figure 11-20 (~. Third expansion of reconstruction 
j 
matrix ( U). 


P2 


Cl 


c. As analysis continues, the process becomes more 
and more mechanical. The only problem likely to be 
encountered is in reducing the matrix to its original 
dimensions, the danger being that false relationships 
may be established by an arbitrary telescoping. In 
respect to reducing the size of the matrix, it is 
possible to shift rows and columns to put the matrix 
in its correct order, but in so doing the individual 
letters must not be disturbed. For this purpose a 
partially recovered matrix as above usually exhibits 
sufficient characteristics to permit this. For example, 
assuming that a mixed alphabet of some type is used 
in each square, an inspection of the letters of the 
matrix allows the following observation. 
(1) Row three R-E-I- 0 ME contains letters 
so far out of sequence as to suggest a keyword, these 
letters possibly being part of the keyword. Thus it 
may be the first row. 
(2) Row one L--- I A IT----- A exhibits 
some alphabeticity if the Pl-C2 values are A I L. 
Further, since the A appears in this row, as \Yell as 
I and L, it may be possible to represent that part of 
the alphabet immediately following the keyword, or 
perhaps part of the keyword. In either case it may 
be the second row. 
(3) Row six, containing the Yin both squares, 
can be· the last row. Row four, if the T and U are 


not part of the keyword, must precede row six to 
maintain alphabeticity. Row 5, since it contains S 


and H in the first square, must represent a portion of 
the keyword. On the basis of the foregoing assump- 


tions the matrix can now be drawn up as in figure 
11-21. 


Pl 
R 
E 
0 !1 E 
Cl 


L 
I A 
T 
A 


C2 
G 1-l 
li 
G 
P2 


T 
0 
1·1 Q 
p 
N U 
H 
s 
y 
y 


Figure 11-21 (/). Initial construction of two-square 
( 
matrix ( U). 


d. The same shifting in respect to columns is 
possible. Again, however, individual letters cannot 
be disturbed. In rows three and four of square P2-Cl 


the letters H - --- - G and P- - N seem to be 
reversed in respect to their normal alphabetic order. 
If these letters are juxtaposed according to their 
normal sequence (considering the 0 to be used in 
the keyword, and maintaining columnar order J, this 
square would appear as in figure 11-22. 


Pl-C2 
H 
1 o i 
?2-Cl 


A 
T 


G 
H 


N I 
p ~;_; 
I s ! 
+-=-+ 
I 
I 


Figure 11-22 ~). Rearrangement of square P2-C I (C). 


(1) A similar inspection of the square Pl-C2 


shows less in the way of alphabetic patterns that 
can be directly interpreted. However, consideration 
of other factors can provide assistance. Ha...-ing 


assumed a keyword is being used, it can further be 
assumed that the letters VWXYZ probably are not 
used; thus they are the last line. Y then would 
appear in the second column and consequently so 
would A and Q. They begin the same column. ~ ote 
that in row three, 0 and M are reversed. Thus the 
square can be put in the order shown in figure 11-23. 


~nN 
1="1 AI="NTIAI 
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CONFI_DENTIAL 


Pl-C2 
R 
E 
P2-Cl 


L 
I 
A 


s 
H 


I 


H 
0 
Q 
0 


N 


T 


I 
y 
17.) 


Figure 11-28 <)11. Rearrangement of square P1-C2 (U). 


(2) The two squares in matrix form appear in figure 11-24. 


Pl 
P2 


R 
E 
E 
H 
0 


C2 
L 
I 
A 
A 
T 
Cl 
s 
H 
G 
H 
T 
M 
0 
Q 
N 
P- 
u 
N 
s 
y 
(Z) 
y 


Figure 11-24 <f· Partially recovered horizontal two-square matrix ( U). 


e. Matrix reorganization and recovery can be 
continued or the analysis of the ciphertext can be 
resumed. Sometimes recovery aids in the final 
solution as it provides a true framework for the 
insertion of additional values as they are found, 
thus avoiding the possibility of establishing false 


relationship. On the other hand, the paucity of \·alnes 


recovered in an intitial entry and the use of a random 
alphabet may prevent matrix recover:-: until the 
message itself is deciphered. In nny cn,;e, both 
matrix recovery and analysis of the text fnllo\1·,; the 
same techniques just explained. 


Section Ill. <f> ANALYSIS OF PLA YFAIR CIPHERS 


11-7. (~ Rules of Encipherment 
a. In {he analysis of Playfair cipher messages, the 
reconstruction of the enciphering matrix and the 
recovery of the plaintext are simultaneous and 
inseparable operations. This is due to the crypto- 
graphic nature of the system where both the cipher 
and plain values occur in the same matrix, being 
differentiated only by the rules of encipherment, 
and this differently in each specific case of digraphic 
encipherment. The rules of encipherment dictate 
the possible manner and combinations of placement 
of plaintext equivalencies in a given situation. 
Further, their specific placement determines their 
equivalencies in other combinations. Thus the two 
processes should be conducted as one. 
b. The relationship of the rules of encipherment 
upon the plain to cipher equivalencies, and their 
effect upon establishing the same values in the 


process of recovery of the ciphertext 
1,.; 


using the matrix shown in figure 11-2.'5 


A 
B c D E 


F 
G 
H 
I 
K 


L 
M 
N 
0 PI 


Q R s 
T 
ul 


v w X y 
'7 
I.J 


illil,.;trated 


Figure 11-25 (U). Example Playfalr squarr il.l 


(1) Where substitution invoke,.; 
letter-; 
nt 


opposite ends of a rectangle, the follmlillg' relation- 
ships exist as shown in figure 11-26. 


11-14 
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~.: 


nnu I!' I nrPd ... l A 1 
..., 


AZp = EVe 


- 
- 
RECIPROCAL 
EVp = AZc 


ZAp = VEe 


- 
VEp = ZAc 


REVERSIBLE 
AZp = EVe 


ZAp = VEe 


EVp = AZc 


VEp = ZAc 


GOp = !Me 


OGp = Mia 


IMp = GOa 


Mip = OGc 


Figure 11-26 (C). Reciprocal reversible relationships (U). 


If the letters are assigned numbers as the possible 
combination shown here: 


12=34 


AZp=EVO 


They may be expressed as an equation. Thus: 


Reciprocal 


Reciprocal 


12=34 
21=43 
34=12 
43=21 


Reversible 


Reversible 


(2) Where substitution involves letters of the 
same row or column these relationships may occur: 


12 
34 


BCp=ODc 
CBp=DOc 


21 
43 


Note that in this case, only reversibility occurs and 
not reciprocity. That is: 


CDc does not equal BCp nor does 


DOc equal CBp 


(3) From the above it can be seen that in all 
cases, column, row, or rectangle (where 12=34), 
21=43. But only when 1 and 2 form appropriate 
diagonal corners of a rectangle does 34= 12 and 
43=21. 


c. The position that a letter occupies in the Play- 


fair matrix coupled \Vith the method of encipher- 
ment determines its limitation in combination with 


other letters, and consequently its equivalent value. 
Any given letter can be represented by eight other 
letters, the four occupying the same row and the 
four occupying the same column. 
(1) Thus, where encipherment occurs along a 
row or column, a given letter can be combined with 
only eight other letters, which can be further limited 
to four if the direction of encipherment is kno\nl. 
(2) In the case of encipherment im·olving a 


rectangle, the same letter can be combined with 16 
other letters, 8 of its own row and column plus the 
8 of the other letter forming the diagonally opposite 
corner. Where encipherment is along a ro,,· or 
column the letter may be combined with 8 other 
letters, 4 for the row and 4 for the column. Of the 
24 possible equations that can be formed by a given 


letter, as either the initial or final letters of a digraph, 


five will indicate a corresponding repetition of a 


given plaintext letter. 
d. The effect of the above observation is such to 
allow the formulation of certain rules in respect to 
the identification of digraphs produced by a Play- 


fair cipher. These rules are: 


(1) Rule 1. In all cases if 
1.2=3.4 
then 2.1 =4.3 
In case of rectangle if 1.2=3.4 
then 2.1=4.3 
then 3.4= 1.2 
then 4.3=2.1 


(2) Rule 2. Where 1.2p=3.4c, for example 


ENp=CPc, there is a minimum probability of one 
in five that any other cipher digraph beginning with 
Cc has Ep as the initial letter of its corresponding 
plain digraph. Also, any cipher digraph ,,·hich ends 
in Pc has the same probability of ~ p as tlw last 
letter of the corresponding plain digraph. 


(3) Rule 3. In those equations where 1.2p=3.4c, 
1 and 3 can never be identical, nor can 2 and 4 ever 


be identical. 
(4) Rule 4. In those equations 1.2p=3.4c 'vhere 
2 and 3 are identical, the letters are all in the same 
row or column, and in the relative order 1-2-4, 2 and 


3 in this case being synonymous. For example·, in the 


matrix above, BCp=ODc. There art' five cyclic 
permutations which will produce the proper se- 
quence. They are: 


BCD-- 
-BCD- 
--BCD 


D --BC 
CD--B 


~nNFIOF!:NTIAL 
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(5) Rule 5. In an equation where 1.2p=3.4c and 
1 and 4 are identical, the letters are again in the row 
or column but in the order 2-4-3. For example in 
the matrix above DCp=EDc; thus the order is CDE. 
The five possible cyclic permutations of this absolute 
order are: 


CDE-- 
DE--C 
E--CD 
--CDE 
-CDE- 


e. The importance of these rules are that they will 
allow the formulation of an assumption concerning 
the arrangement of values within the cipher matrix 
and the elimination of equivalencies in the crypto- 
gram. 


Example: 
(1) Rule 1, where 1.2=3.4 and 2.1 =4.3, gives 
rise to digraphic idiomorphs which may be used in 
the assumption of probable words. Thus the word 
ATTACK can be enciphered by the matrix in 
figure 11-25: 


ABBA 
P 
AT TACK 
C 
DQ QD EH ATp=DQc 
TAp=QDc 


(2) Rule 2, where the probability of similarity 
exists, indicates that once each common combination 
as ERp, ORp, and ENp have been assumed or 
determined, the rules can be used in discovering 
additional digraphs and partial words. 
(3) Rule 3, where 1 and 3, and 2 and 4 can never 
be identical, aids in the elimination of possibilities 
when a specific message is being studied. 


(4) Rules 4 and 5 permit the establishment of 
values and their correct sequencing in the recovery 
of the matrix. 


11-8. (C) Analysis of Playfair Cipher 


a. To illustrate the steps and process involved in 
the solution of a Playfair cipher, the follmving 


example will be used. Assume that the analyst has 
previously identified the message as the product of 
a Playfair cipher on the basis that it contains an 
even number of letters, that repeats and spacings are 
multiples of two, that no doublets occur, that several 
letters are missing, and finally the discovery of what 
appears to be Playfair idiomorphs in the repeated 
sequence. Moreover, for the purpose of this illus- 
tration, it is assumed that the analyst has dividNI 


the plaintext into its digraphic units, prepared a 
frequency distribution, and tabulated significant 
repeated sequences, figure 11-27(!) and 11-27<2). 


With the preliminary studies completed, analvsis 
may commence. 


A 


B 


c 


D 


1 
2 
3 
4 
5 6 7 
8 
9 10 11 12 13 14 15 


EC OG EC UR RO VQ AD ZB FG MG AW CE WO DY AO 


EQ QM CT MG KN RA AR IQ MG RB IR IK HM KB CY 


AR IQ MG YF UY UY BT LG UP EP ME FK BR AC KR 


CY AR AH RA WA EM CI EC AW CE SW CE QE PO HE 


E 
EM VO ME LD CU QA PQ RE LQ UY GT TV .PB XC QP 


F 
EA YF UY BN GO NC LD PK RF LZ CI DT KR EA QI 


G 
GT 1'V EC LF OR LR QA PQ AR BD LG QL OZ QI BN 


H 
crron~~n~n~ucr~~a~ 


I 
CW QU QF AL EC BS CI EM LV PC 


Figure 11-27(!) (C). Ciphertext prepared for analysis ( U). 


11-16 
CONFIDENTIAL 


t:nNF"IRI="NTI41 


A B c D E F G H I J K L M N 0 
p Q R s T u v w ~ y ZJ 


! 
A 
- 
- 
,_ 
- 
- 
~ 
- 


B 
- 
= 
1-- - 
c 
= 
a 
1- 
- 
- 
- 
D 
- 
- 
- 
- 
E 
I~ 
- 
= 
- 
- 
F 
1- 
1:::: 


G 
- 
1- 
- 
= - 
H 


I 
- 
= - 
J 
1 


K 
- 
1- 


L 
.I= - - 
- - 
- 
M 
- = 
- 
N 
- 
- 


0 
- 
- 
- 
p 
1- - 
- 
- 
- 
- 
Q - 
- - 
:= 
- - 
·- 
- 
R - 
- 
- 
~ - 
- 
s 
1- 


T 
- 
u 
- 
·- - 
I~ 


v 
- 
- 
w - 
- 
X 
- 
y 
- 
z - - 


Figure 11-1!7@ ~). Digraphic frequency distribution Playfair cipher ( U). 


b. A close examination of the text reveals the 
following repeated sequences: 


Lin.e B5 
K N R A A R I Q M G 
B 14-C3 
K B 0 Y A R I Q 'NI G 


C15-D4 
KR OY AR AH RA 
D14-E3 
P 0 ME EM VO ME 
E6-G8 
Q A P Q 
Ell-Gl 
G T TV 


(1). The first sequence, with its ABBA pattern 
suggests the word BATT ALI ON. · digraphically 
divided as: 


+B AT TA L I ON 


KN RA AR I Q MG 
If these values are correct, the second listed repeats 
may also be the same words, enciphered with an X 


between the TT doublet, divided as: 
BA TX TA L I ON 


KB OY AR I Q MG 
By using the values assumed in the first two se- 
quences, the third sequence equals: 
TX TA 
AT 
KR OY AR AH AR 
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It is obvious that this sequence can hardly be 


"BATTALION",'' but another common word in 
which the TT doublet occurs is "ATTACK." If 
this is the correct word for the sequence, the 


CKp=AHc and -Ap=KRc. 
(2) The repeats QA PQ, and GT.TV are sug- 
gestive of the word STOP. However, at this point, 
the assignment of plaintext values to either would 
be sheer guess work; therefore, for the moment 
they are bypassed. The values that have been 
assumed may now be inserted in the text and again 
studied for further exploitable patterns. On line 
B, immediately preceding 
the 
assumed 
word 


"BATTALION," the digraph MGc is noted, which 
equals ONp. Aware that "BATTALION" is often 
preceded by a number, the possible ON pis suggestive 
of SECOND. The acceptance of this would permit 
the expansion of the sequenee to: 
QM C T MG KN R A A R I Q MG 


-SEC ON DB AT TALI ON 


If BATTALION in the first instance is preceded by a 


number, it is very likely to be the case in the second 
instance as well. From the fact that there normally 
are only three battalions to a regiment, the analyst 
may infer that either "FIRST" or "THIRD" 


probably is the second number. In dealing with 
numbers, one tenqs to keep them in order. Therefore, · 


the word THIRD would be assumed. This sequence 
then can be expanded to: 
I R I K NM KB CY AR I Q MG 
-T HI RD B A TX T A L I ON 


Thus the remaining digraphs RB IR, may equate to 
the word "AND," as 


RB IR 
AN DT 


c. Once a few values have been tentatively 
established, the analyst can, using the rules of en- 
cipherment discussed in the previous chapter, expand 
the values recovered. First a tabulation of all as- 
sumed values is made and, using rule 1 where 
1.2=3.4 then 2.1=4.3, the reversals are shown in 
figure 11-28. 


Assumed Values 


-Sp = QMa 


ECp = CTa 


ONp = UGa 


DBp = KNa 


ATp = RAa 


Lip = IQa 


ANp = REa 


DTp = 7![C 


Hip = IKa 


RDp = NMa 


BAp = KBa 


TXp = 7.:70 


-Ap = KRa 


CKp =AHa 


Rule 1 Reversal 


ESp = MQa 


CEp = TCa 


NOp = GMa 


BDp = !JKa 


TAp = ARa 


ILp = Qia 


NAp = BRa 


TDp = 1fTo 


IHp = Kia 


DRp = MNa 


ABp = BKa 


XTP = YCa 


A-p = RKa 


KCp = HAc 


Figure 11-!28 (C). Use of rule 1 to determine plaintext 


values ( U). 


(1) The next step is to apply rules 4 and 5 to 
the above equations in order to recover possible 
row and column sequences of the enciphering matrix. 
Both lists are examined for equation of 1.2=3.4 


\Vhere 2 and 3, and 1 and 4 nre identical. The follo\\'- 
ing equations are noted. 


ECp=CTc 
TAp=ARc 


Lip=IQc 
Hip=IKc 


BAp=KBc 
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Rule 4 states that in the equation 1.2=3.4 where 2 
and 3 are identical, the relative order from left to 
right or top to bottom is 1-2-4. Thus the equations 
shown become: 


ECp+CTc=ECT 


TAp+ARc=TAR 
Lip+/Qc=LIQ. 
Hip+IKc=HIK 
Rule 5 states that in an equation 1.2=3.4 where 
and 4 are identical, the relative order is 2-4-3 from 
left to right or top to bottom. Then the equation 
BAp=KBc becomes ABK. 
(2) Note that only the assumed values are used. 
The values obtained by rule 1 could have been used 
equally as much. However, the results would have 
only been the reversal of what has been established. 
As a rule, in the beginning stages it is not wise to 
mix the two, as it tends to introduce too many 
possibilities of deriving the same value. Moreover, 
note that only the absolute order of a sequence is 
being used, not all of its permutations. At this 
stage, their introduction would again only result in 
confusion. As analysis continues, and if the ac- 
cepted absolute permutation is not consistent with 
the matrix dimensions and enciphering process ob- 
served, the other permutations can be used. 
(3). Examination of the sequences, noting their 
common letters, indicates that they can be chained, 
figure 11-29, to form a pseudo-matrix. 


ECT 
E c T 
A 
R 
E 


TAR 
L 
B 
or 
c 
H 


LIQ 
H 
I 
K 
T 
L 
I 
Q 


HIK 
Q 
A 
B 
K 


ABK 
R 


Figure 11-29 (~). Construction of preliminary matrix ( U). 


Note that in each case the values that can be 
obtained are the same and that the o;equential order 
of each sequence is maintained. Only their arrange- 
ment differs. 
(4) Using the pseudo-matrix the analyst can 
now s~an the list of assumed values above in figure 
11...:.27 and add values to the pseudo-matrix, \\"here 


required, to complete an equation. For example 
ANp=RBc is 
noted, 
as 
well 
a~ its 
reversal 


NAp=BRc. With this theN can bP plaePd as ~h0\\"11 
bPlmL By continuing the samP proeps~. tlw (•qna- 


tions DTp=IRc, DBp=KNc, and RDp=.V"~\lc an• 


located in the list and, once fitted, jH'rmit the CXJHtll- 


sion of the matrix 11s shown in figure 11-30. 


E c T 
A R' 


L 
B 
N 


H 
I 
K 
D 


Q 
M I 


I 
X 
y 
I 
I 


F1"gure 11-30 <I!. First expansion of matrix ( U). 


d. With a partially recovered matrix "·hich ,,·ill 


logically produce all the assumed values listed, it is 
now possible to return to the text and attempt to 
break out further portions. With so few ,-alues it is 
not expected to produce any degree of intelligibility 
other than bits and parts. These again will be the 
basis of further assumptions and consequent expan- 
sion of the matrix. Following the partial decipher- 
ment of the message, the follo,ving significant 
passages are observed. 


0-15 KR CY AR AH RA WA EM 0 I EO AW OE SW OE QE 
A TX TA CK AT 
R- TH RE 
ER 
ER -T 
F-13 KR EA QI GT TV EO LF OR LR QA PQ 


-A RT I L 
RE 
NT ST 


G-9 
AR BD L G Q L 0 Z Q I BN 
TANK 
IT 
I L LB 


(1) In each of the passages above, sufficient 
plaintext values are at hand to lend substance to 
good assumptions. The first phrase is obviously a 
time reference relating to the time of the planned 
attack. The plaintext bit THRE can only be a part 
of the word "THREE." The digraph A We preceding 


ERp is likely to be EZ to form ZERO. Logically 


expanding, the phrase shown belO\,. can be dPvl'loped 
"ATTACK AT ZERO THREE ZERO ZERO." 


With this phrase, the following eq tul.tiono;, figure 
11-31, can be developed t1nd the matrix expanded 


as shown. 
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ZEp = WAa 


ROp = EMa 


THp = Cia 


EZp = AWa 


OZp = SWa 


OTp = QEa 


E 


0 


w 


c 


H 


X 


T A 
R 


L 
B 
N 


I 
K 
D 


Q s M 


y z 


Figure 11-31 (C). Second expansion of matrix (U). 


(2) The second phrase obviously consists of 
the words ARTILLERY REGIMENT, probably 


For example: 


followed by STOP. 


F13 KR 
-A 
EA 
RT 
QI GT TV EO LF OR 
LR 
IL (LE)(RY) RE (GI)(ME) NT 
QA 
PQ 
ST (OP) 


On this basis, the following equations can be pro- 


,uced, figure 11-32, and the matrix expanded again. 


LEp = GTa 


RYp = TVa 


Gip = LFa 


STp = QAa 


OPp = PQa 


E 


G 


F 


0 


w 


c T 


L 


H I 


p 
Q 


X 
y 


A 
R 


·a 
N 


K 
D 
s M 


z v 


Figure 11-32 r· Third expansion of matrix (U). 


(3) The third phrase TANK UNITS WILL, 
where UNp=LGc provides the one additional value. 
Thus, the matrix is completed as shown in figure 
11-33. It is now a simple matter to decipher the cryp- 
togram. 


E c T 
A 
R 


G u L 
B 
N 


F 
H 
I 
K 
D 


0 
p 
Q s M. 


w X 
y z v' I 


Figure 11-33 r. Reconstructed Playfair matrix ( U). 


11-9. <f.i Completion of the matrix 
a. In the preceding example, the proposition that 
recovery of the text and reconstruction of the matrix 
proceeds simultaneously is shown. The question yet 
to be answered is whether it is the correct matrix. 
The fact that a message can be deciphered does 
not prove its correctness. This condition arises 
out of the fact that for each specific matrix 
there are 24 additional cyclic permutations which 
will give exactly the same results. The importance 
of the recovery of the original matrix lies in the 
possibility of predicting future matrix values given 
the knowledge of current matrix arrangement. 
b. In the case of a keyword mixed sequence as the 
Playfair matrix, recovery of the permutation of the 
square presents little difficulty, using as a base the 


UVWXYZ cluster which rarely forms a part of 
the keyword. To observe this, examine again the 
matrix in figure 11-34, just previously recovered. 


E c T 
A 
R 


G u L 
B 
N 


F 
H I 
K 
D 


0 
p 
Q s M 


w X 


L... 


y z vi 


Figure 11-34 <1· Playfair matrix reconstructed (U). 
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The last three rows are obviously out of sequence, 
V should precede the W, M should precede the 0, 


and D should precede the F. By a simple shift of the 
last column to the first position, the matrix is 
reordered and now in its correct sequence. This can 
be noted in the appearance of the keyword REC- 


TANGULAR. This is a simplified example, but it 
serves to illustrate the point that in keyword mixed 
sequences, the alphabetic sequence of that part of 
the alphabet outside the keyword sequence serves to 
reorder the matrix. Other cases are more complicated, 
but the basic principles remain the same. 
c. In the case of Playfair matrices based on a 


transposition mixed sequence, the recovery of the 
original presents a different problem for which 
different procedures must be used. Essentially the 
process lies in the recognition of patterns in one of 
the original matrix's permutations and, using this us 


a base, reconstructing the original. The following 
illustrates this process. 
(1) Given an original matrix, shown in figure 
11-35, recovery of a transposition mixed sequence 
and the keyword follows the same procedures as 
previously given for transposition ciphers. 


A 
G w c Q 


E 
T 
F u z 


H s I 
N 
L 


[) v p 
B VI 


R 
0 
y 
K 
X 


Figure 11-35 ((p. Playfair matrix ( U). 


By scanning th.e rows of the matrix, which correspond 
to the columns of the keyword matrix, several bir, 


which exhibit alphabetic progression can be found 


They are: .A.GW, LDV, FMZ, PBU, and YKX :-o;et 


on end as columns and juxtaposed in alphabetic 
sequence by last letter, they form the order: 
P L A Y F 
BDGKM 
uvwxz 


With this, the beginning of the keyword should be 
obvious, leading to a rapid solution. But if it wus 


not, by shifting to the second row and building 
further on its sequential pattern, the follO\ving 
sequence would be produced, as shown in figure 
11-36. 


8 7 1 ~ 4 6 9 2 5 3 


PLAYFIRCHE 
BDGKMNOQST 
U V W X Z 


Figure 11-36 (C). Recovery of mixed keyword sequence (U). 


(2) Where the analyst works from a permuta- 
tion of the original enciphering matrix, a modifica- 
tion in this procedure is required as a preliminary 
step. He must first find some one permutation which 
shows the sequence characteristics on \Yhich he can 
base the recovery of the keyword. For exum1;le, 


given the matrix permutation of figure 
11-37, 
recovery of the keyword would be difficult, as it:,; 
rows do not exhibit columnar order of the transposi- 


tion matrix to the required degree. 


F 
X 
R 
M 
y 


T 
G A 
N c 


Q I 
K z H 


w 0 s 
L 
E 


B u D v p 


Figure 11-37 0· Matrix permutation (L'). 


Since a permutation of the ro,,·s does not affect 
keyword recovery, the analyst need only permutate 
the columns. This can be done by constn;cting a 
.') x 9 matrix of repeated cohtmns, as illustrated 


in figure 11-38. 


1 
2 
3 
4 5 
1 
2 
3 
4 


F 
X 
R 
M 
y 
F 
X 
R Ml 
I 


T 
G A 
N c T 
G A N\ 


Q 
I 
K z H 
Q 
I 
K z 


w 0 s 
L 
E 
r.; 
0 s 
L 


B u D v p 
B u D v J 


Figure 11-38 r· Repetition of column pemwtatz.ons (U). 


r:.n N I=" I n J:" NT 141 
.... 
11-21 


-GONFIDENTIAL' 


(3) Testing each five by five combination, the 
analyst will soon find a permutation containing the 
appropriate sequence. In this case, it is the fifth, 
shown in figure 11-39. 


R 
M 
y 
F 
X - 


A 
N c T 
G 


K z H Q I 
s L 
E w 0 


D v p 
B u 


Figure 11-39 J'1· Selection of correct permutation (U). 


From this permutation using the underlined se- 
quences, the original keyword and matrix can be 
recovered as illustrated in figure 11-40. 


8 7 6 ~ 3 9 1 4 5 2 
A 
N c T 
G 


POLYGRAHIC 
K z H 
Q I 


BDEFKMNQST 
s 
L 
E w 0 


U V W X Z 
D v p 
B u 


R 
M y 
F 
X 


Keyword: 
POLYGRAPHIC 


Figure 11-40 J!!J· Recovery of keyword mixed sequence and 
original enciphering matrix ( U) . 
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PART FIVE }teJ 


POLY ALPHABETIC SUBSTITUTION SYSTEMS 


CHAPTER 12 ~) 


PERIODIC POLY ALPHABETIC SUBSTITUTION 


Section I. ~ 
INTRODUOION 


1 2-1 . ~ 
Mono- 
and Polyalphabetic Cipher 
Systems 


a. In previous paragraphs, the cipher systems 
presented used one basic alphabet for the encipher- 
ment of messages. Thus they are classified as mono- 
alphabetic ciphers. It is true that certain of those 
systems provide for variant values, yet they are not 
classified as polyalphabetic. The essential difference 
between monoalphabetic and polyalphabetic substi- 
tution lies in the primary objective of the system. 
(1) In· those monoalphabetic substitution sys- 
tems haying variant values, the object is to suppress 
so far as possible the characteristic frequency of 
letters and resultant word patterns. Several methods 
are shown, some which provide several different 
cipher values as equivalents for all the plaintext 
letters, and others which provide only variant values 
as cipher equivalents for the high-frequency letters. 
In each system there are conditions inherent in the 
method of encipherment itself, conditions that 
produce, in the cryptogram, certain definite clues 
that lead to the establishment of the equivalencies 
for one plaintext value. 
(2) :Moreover, each of those systems derives its 
security from the care \dth which the cryptographer 
performs his task. Given the free choice of using 
variant values, or if he was hurried or slip-shod and 
used the same variant value consistently, he would 
materially detract from the security of the system. 
(3) In either case, the end result is that crypto- 
grams are produced whose true security lies in the 


minimum nse of the system. Gi\·en a number of 
cryptograms from the same system, or a fe\\' com- 
bined with poor encryption procedures. ,;olution i,.; 


relatively easy. 
b. In the case of true polyalphnbetic ,;ub,;titlttion 


systems, the object is to establish a definite proce- 
dure for the automatic ,;hifting or changing of a 


number of cipher alphabets employed in the en- 


cipherment of a single message during it,; encipher- 


ment, thus producing variant values. Furthermore. 
this method, within certain limits, is beyond the 


whim of the cryptographer. The total result of ,;uch 


a system is to greatly increase the degree of Jiffi('ulty 


in establishing the cipher eq ui valenl'ie,; of a gi \'ell 


plaintext value. There are a number of tr11e poly- 


alphabetic cipher systems, although for rnilitar~· their 
number is limited for reasons of prtl<' t il'a lit y. All 


true polyalphabetic system,; \\·ill exhibit follm,·ing 


essential characteristics. 
(1) Each plaintext letter is representPd by t\\'O 


or more cipher equivalents, their exact idcntitiPs 


being determined by the position they on·11py in the 


plaintext. 
· 


(2) One and the same cipher letter rPpr<'sents 
two or more different plaintext lt>tt<'r,;. th1· I'Xad 


equivaleneies being determined by th1• ,.;y,.;tl'm itself. 


12-2. ~Example of Polyalphabetic Substitu- 
tion 
a. Polyalphabetic substitution is ilhi,;trntl'd in 
figure 12-1. 


cnr-u=•nr:NTIAI 
_ 
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Key: 
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P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C1 
C2 
C3 


c4 


C5 


c6 


CDEFGHIJKLMNOPQRS T u v w X 


I J K L M N 0 p Q R s T u v w X y _Z A B c D 
p Q R s T u v wx y Z A B CD E F G H I J K 
H I J K L M N 0 p Q R s '.t u v w X y Z A B c 
E F G H I J K LM lJ 0 p Q R s T u v w X y z 


~ S_T U V W X Y Z ABC DE F G HI J K L M 


y z ~ B 
E F G H 
L M N 0 


D E F G 
A B CD 


N 0 p Q 


1 2 3 4 5 
E N E M Y 


G V T T C 


6 1 2 3 4 5 6 1 2 3 4 5 6 1 
R E E N F 0 R C E M E N T S 
IGMCMSIEMBLRKU 


2 3 4 5 


S E E N 
AT L R 


6 1 
I N 
z p 


2 3 4 5 6 1 2 3 


V I C I N I T Y 
DXJMEKBN 


4 5 
6 1 2 3 


0 F 
H I L L 
VJ 
YKTA 


4 5 6 


0 N E 
V R V 


1- 2 3 4 


Z E R 0 


B M G V 


5 6 1 2 


Z E R 0 


D V T W 


3 4 5 6 
N I N E 


CPR V 


1 2 3 4 5 6 1 2 


P 0 S S I B L E 


RWHZMSNM 


3 4 5 6 1 2 


ATTACK 
PAXRES 


G V T T C 


DXJME 


CPRVR 


L H X X X 


3 4 5 6 1 2 3 4 5 
I N D I C A T E D 


XUHZEIILH 


IGMCM 
SIEMB 
LRKUA 


KBNVJ 
YKTAV 
RVBMG 


WHZMS 
NMPAX 
RESXU 


Figure 12-1 ~· Example, polyalphabetic substitution (U). 


T L R Z P 


V D V T W 


H Z E I I 


b. In the system above, the cipher equivalent for 
the first plaintext value is drawn from the first cipher 
component (Ep= Gc), the second from the second 
(Np=Vc), and so forth until the sixth cipher com- 
ponent is reached. At this point, the seventh letter of 
the message, the first cipher component, is used once 
again as the source of the cipher equivalency. Thus 
the frequency of the plaintext letter and any charac- 


teristic pattern that might occur in thr plaintext 


are suppressed. 
c. The method of encipherment d<'mtltt,tr<tt<'d 


above can be duplicated \Yith a ,;impl<' "tnp atT;ttt£"<'- 


ment and a numPric key. which corrp,;pottd, t" tlH' 
differPnt juxtaposition of tlw cipher nnd 
plain 
sequencP above. For example>, tlw alphalwt mttld lw 


reproduced as follo\vs: 


P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C 
ABODEFGHIJKLMNOPQRSTUVTVXYZABODEFGHJJKL1vfNOP()RS Pt<·. 


(1) In figure 12-1, the successive juxtapositions 
of the plain to cipher are Ap=Ocl, Ic2, Pc3, Hc4, 
Ec5, and Rc6. These juxtapositions can be indicated 
by the assignment of numeric values to each. Thus, 
they may be indicated as 3-9-16-8-5-18, where 3 
indicates the third letter of the cipher sequence (c), 
9 indicates the ninth letter in the cipher sequence (1), 
and so forth. These numbers indicating the sequen- 
tial position of the letters are the cyclic setting of 
the strip. 


(2) To enciphPr the mPssugc gi Yen n bo 1 ,. . t hr 


keys can be written out horizontally and tln· tll<''"agl' 


inscribed in column bPneath tlw hy. Tlw ,trip 


alphabet is set at its first key sl'tting < ;) 1 
11 hne 
Ap=Cc and all letters below this key an• <·nnpltPrPd. 


The setting is then changed to the next k<·y. 9. 1dwn 


Ap=lc and all letters below this key an· ('1\ciphL•reJ. 


The same process is continued until th<· <'ntire 


message is enciphered; then it is transfprred to five- 
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letter groups. A partial example is shown below in 
figure 12-2 using the same data as in fig_ure 12-1. 


3 
9 
16 
d 
5 18 
E 
N 
E 
I·~ 
y 
R 
G v 
'I' 
1' c 
I 


E 
E 
l! 
F 
0 
R 
G 
t-1 
c M s 
I 


c E 
n E 
II 
T 


£ 
!1 
B 
L 
R 
K 


s s 
E 
E 
N 
I 
u A 
T 
L 
R 
z 


Ciphertext : 
GV'l'TC IGMCM SIEl!B LRKUA TLRZ • . . . etc. 


Figure 
12-2 (jt}. Columnar encipherment duplicating 
key 
period ( U). 


12-3. (/i!f Classification of Polyalphabetic Sub- 


stitution Systems 
a. Polyalphabetic substitution ciphers can b<' 


classed into two distinct types, periodic systems and 


aperiodic systems. The periodic systems includt• 


those whose cryptographic treatment results in 
the production of cyclic phenomena in the crypto- 
graphic text. Note, for example, the columnar 
encryption process just demonstrated. Therein, 
the cyclic nature of periodic polyalphabetic substi- 
tution can be seen in the repetition of constant plain 
to cipher equivalencies in each column, i.e. in the 
first column Ep= Gc, in the second, Ep=111c, in 
the third Ep= Tc, and in the fourth Ep=Lc. 
The cryptographic process of aperiodic systems on 
the other hand is designed to eliminate this cyclic 
phenomena. The specifics of this system and its 
analysis are treated in chapter 14. 
b. The cyclic phenomena inherent to a periodic 


system may b<' exhibited externally, as in th<' 


system above. In these cases, the phenomena is 
said to be patent. In some ciphers the cyclic phe- 
nomena is not exhibited in the cryptographic text, 
in which case they are said to be latent. The periodic- 
ity of the cipher under these conditions must be 
uncovered by a step to be explained, preliminary to 
analysis. 
(1) The periodicity of a given system may be 
quite definite; determinable with mathematical 
preciseness, in which case the periodicity is said to 
be fixed. The example above fits this definition, the 
period there being fixed at six. 
(2) In other instances, the periodicity may be 
more or less flexible, depending upon the system, 
but subject to definite limits imposed by that 
system. In such a case the periodicity is said to be 
flexible. 


c. A primary classification of periodic systems is 


by the number and method of usage of the ciplwr 


alphabets. All periodic systems arc consid<•n•d to bP 


either a repeating key or u progressive alphabet 


system. 
(1) In a repeating key system, only a fe,,- of a 
whole possible set of cipher alphabets arc used in 
enciphering a given message. These alphabets ns0d 


in a fi..xed sequence determined by tlw key ttre rm- 


ployed repeatedly until the message is f'llciphercd. 


Possibly the same key may be nsed to enciphN a 


second message, or a new key may be used for each 


message. The key itself may be u secret ,,-orcl, a 


phrase, or a number. In any (;ase, it determines the 


numbers, identity, and sequence of llSf' of the cipher 


alphabets. 
(2) In a progressive alphabet system. ull the 


cipher alphabets comprising the complete set for tlw 
system are used one· after the other, in turn. for the 


encipherment of u me;;sage. '\VIwn th<• lu:<t alpharwt 


is used, the sequence of use is begun anP\Y. 


12-4. (/t> Classification of Cipher Alphabets 
a. ThP substitution procpss in polyalphabPtie f'i- 


phers involv<'s the use of a mtmb<.'r of alphalwt:- 


which can be derivcd by a number of nwthod,;. Th(' 
exact nature of thcir preparation, which d<.'t<'rmine:< 


their characteristics, plays an important rolP in tlw 


solution of polyalphabctic cipht'rs. C'iphPr alphabl't:< 


for polyalphabetic substitution arr elassifit>d as 


independent and derived. 
(1) Independent or tmrPlated cipht'I' <llphabPt" 


contain separate and distinct plain and l'iplwr 


sequences having no relationship to om• ttllotla•r. 
Such sequences can be derived by any of tht> mNhods 


previously discussed, i.e. they may bP keyword 


mixed columnar, keyed columnar mixed. or dPei- 


mated alphabets. Tht> solution of cryptogram:< pro- 


duced \Yith independent alphabets is madt> mort' 


difficult by the very reason that no rPlationship 


exists between tlwm. For this rPason, in tht• eonr,;<• 


of analysis, valut>s are not tmnsfprabk. HoiH'YN. 


since their production and handling in the crypto- 
graphic process poscs probl<.'rns affpeting tlwir prac- 


ticability, they are not as favort'd a,; intl'ITdatPd 


cipher alphabets. Hence, they are not as oftrn 


encountered. 
(2) Derived or interr<.'latl'd ttlphabPts, as the 


names imply, are produccd by tlH• intNaetion of 


two primary compOtwnts \Yhich, wlwn j nxtapo,;l'd at 


various points, yield a number of secondary alpha- 


bets. The number of secondary alphabets, givPn 


two constant primary comp01wnts, is t>qual to tlw 


number of diff<'rent points of coineidt>net>. In pffect 


then, what is brought about is either a .strip system, 


such .as the one shown in paragraph 12-2c, or a 
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cipher alphabet, also shown in paragraph 12-2a, 
which has one plain component and several cipher 
sequences, all of like structure, joined together at 
varying points of coincidence. The cipher sequences 
generated by the juxtaposition are termed secondary 
alphabets. 
b. For the purpose of cryptanalysis, some of the 
more common configurations of the primary com- 
ponents and secondary alphabets derived therefrom 
are given in the following: 
(1) Case I. The primary components are both 
normal sequences. 
(a) The sequences proceed in the same direc- 
tion; the secondary alphabets produced are direct 
standard alphabets offset at points of juxtaposition. 
(b) The sequences proceed in opposite direc- 
tions; the secondary alphabets are reversed standard 


· alphabets and are reciprocal with the same limita- 
tions as discussed in paragraph 7-6a. 
(2) Case II. The primary components are not 
both normal alphabets. 
(a) The plain component is 
a standard 
alphabet and the cipher component is a mixed 
sequence; the secondary alphabets are then mixed 
alphabets. 
(b) The plain component is a mixed alphabet 
and the cipher component is a normal alphabet; the 
secondary alphabets are again mixed alphabets. 
(3) Case III. Both components· are mixed 
sequences. 
(a) Components are identical mixed sequen- 
ces proceeding in the same direction; the secondary 
alphabets are also mixed sequences. 
(b) Components are identical mixed sequen- 
ces proceeding in opposite directions; the secondary 
alphabets are mixed sequences and also are recipro- 
cal,againwith thelimitationsdiscussedin paragraph 7-6a. 


Ok=Ai 


(i) 


(c) Components are different mixed sequences 
either proceeding in the same or opposite directions: 
the secondary alphabets are mixed alphabets. 


12-5. {d Repeating Key 
a. It¥s'the use of a repeating key which imparts 
the cyclic pattern, or periodicity, to periodic poly- 
alphabetic substitution. Repeating keys are used to 
indicate the number, identity, and the sequence of 
the eipher alphabets used. The key itself, as shO\nl 


in preceding examples, can be expressed in terms of 
numbers or letters, both derived from the other. 
and the letters usually spelling out a \\·ord. The 
literal key may be a word, a phrase, or even a sen- 


tence, usually being easily recalled. 
b. In the key proper, its total number of elements 
determine the number of alphabets to be used. The 
identity of each element determines the ,.;pe<"ific 


cipher aiphabet used, and its relatiYe order in the 
key determines the sequence of the cipher nlphabeb. 


The total number of cipher alphabets a n1ilable for 


use in a given system may be unlimited, except for 


practical purposes. However, where alphabet" are 


reproduced by sliding two primary alphabets agnin,.;t 


one another, only 25 cipher alphabets, in the ca,.;e of 
English alphabets, are possible. The key then, in 


some respects, is unlimited as to length. Howenr. 


in most cases it will be found to correspond to n 


word, phrase, or sentence, usually one that is ensily 


remembered. 
c. To use a key in finding equivalents with sliding 


primary components, four elem0nts mu,.;t bP knO\nl. 


They are the key letter (k), tlw ind('x letter li), tiH' 


plaintext letter (p), and the cipher lettPr (c). 


(1) The key letter and the index letter,.; imlicatl' 


the point of coincidence of the cipher tttHl plain 


component. For example: 


P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


C 
ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRST[/Fll.XYZ 


(k) 


(2) The meanings associated previously with c 
and p remain unchanged, c indicating the cipher 
vaiue and p the plaintext value. Thus to find one 


value, an equation using these elements may be 
written as: 


Ok=Ai; Ep=Sc 


(3) Note that in the above, two tacit assump- 
tions ace involved. First it is accepted that the index 
letter (i) is found in the plain component and that 
it is the letter A, and second that the key letter (k) 


is found in the ciphPr component. Xormally this is 
the case. However, it net>d not bt' so. Tlw indPx 


letter used, and the rt>lntin' location of k, i. p, and c 
can be easily changed, only a fixed ngrt>PlllPllt bet\n'en 


the correspondents being required. Thus in a key 
and equivalency equation, the key and indt>x letter 


must be specified and the relative location of all 


clements shown. This can be accomplished vPry 
simply, merely by adding a number (1) for the plain 


component, and (2) for the cipher component to tlw 
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equation given above. Thus the conventional method 
of 'finding an equivalency is shown as: 


Ok/2=Ai/1; Ep/1 =Sc/2 


(4) As mentioned previously, the normal method 


of finding equivalencies need not always be followed. 
In fact, employing 2 sliding components and the 
4-element equation, 12 possible combinations result. 
However, as the method above is most widely used, 
only it will be given. 


Section II. CJJ THEORY OF SOLUTION OF PERIODIC POLY ALPHABETIC SUBSTITUTION 


1 2-6. ~ 
The Three Steps of Analysis 
a. The cryptography of periodic polyalphabetic 


substitution, as illustrated previously, is such that 
its solution may be effected by the completion of 
three steps in succession. These steps are: 
(1) Determining the period. The analyst at- 
tempts to determine the length of the key which 


imparts the cyclic periodicity to the system. This is 
done through the isolation and analysis of groups 


found repeated in the message. The repeats usP<l in 
this approach must not be accidental repeats, but 


r~peats which have resulted through a cyclic juxta- 
position of similar sequences in the plaintext and 


similar sequential periods of key usage. In pffect, 


the determination of the period identifies the num- 
ber of alphabets used in the system as the cyclic 
periodicity is a result of the use of a number of 
alphabets. 
. (2) Reduction to monoalphabetic terms. In this 
step, once the period has been identified, the analyst 
can divide the text into a number of segments 
equal to the number of alphabets involved, each of 
these segments representing that portion of the 
ciphertext produced by one of the cipher sequences. 
Thus a polyalphabetic text is reduced to its mono- 
alphabetic bits and is susceptible to analysis on 
those terms. 
(3) Identification of ciphertext values. The third 
step is that of analyzing each of the monoalphabetic 
ciphertext distributions produced by the second 
step in order to determine their respective plaintext 
values. In this step, essentially the same techniques 


arc used as for the. analysis of any monoalphabetie 
cipher. 
b. The foregoing steps comprise the general out- 
line of solution for any periodic polyalphabetic 
substitution cipher systems, regan.Hess of the kind 
of cipher alphabets involved. There is, of course, 


some modification required for each particular case. 
c. As a matter of course, prior to the analysis, 
any cryptosystem must first be identified. Identifica- 
tion, in the case of periodic polyalphabetic substitu- 
tion cipher systems, rests upon the two character- 
istics of the system, its polyalphabeticity which 


impat:ts a relative flatness to the frequency distri- 
bution, and the cyclic phenomena within the text. 
Statistically, computations will indicate that the 


message text is random. The cyclic use of a number 


of alphabets will result in cyclic plwnomena indi- 


eated by one or mon• of tlw following eonditions: 


(1) Length of message and repeats will not be 


divisible by a constant factor. 
(2) Distanee between repeats ,,·ill b<• a factor 


of the period length. 


(3) Small cyclic periods, particularly thos(' of 


even numbers, are apt to producP significantly 
higher than random digraphic indexes of eoincidt>ncP. 


(4) Statistical computation of Pach rnonoalpha- 


betic sequencP, thf' result of step t\n>, usually 


indicates plaintPxt, though this is subject to ntria- 


tion due to relative numbers of letters Pnciplwn•d 


by each sequence. 


12-7. ~Basis for Determining the Period 
a. The external phenomena on which the deter- 


mination of a system's rieriodicity is based, is a 


result of the encipherment of an identical plaintext 
letter by the same cipher spquence, sen•ral time,;. 


The repetitions so 
produced are called casual 
rep!.'titions since their caUS{' is n direct result of the 
use of a periodically repenting key. It also happen,; 


that different plaintext letters, enciphered by a 


different eipher sequence, will produce identical 
cipher letters in the ciphertext. In this case, ,;inc<' 


the rl'petitions are produced by the accidental 


juxtaposition of diffen'nt vnluPs, they are termed 


accidental repetitions. 
b. As thP determination of the period lPngth 
dPpends upon the analysis of rt'petition "·hich occur,; 


in the ciphertext, it is obvious that a distinction 
must be made bet\\·een causal and accidental repe- 


titions. In the case of single letters, this becomes 


very difficult as accidental rt'[Wtitions can oecur as 


frequently as causal repetitions. Thus no basis for 
distinguishing one from tlw other is pnn·idPd. 


However, in the case of digraphs and polygraphs, 
the chances of a number of differPnt plaintPxt lettt'fs 


and cipher sequences coinciding sequentially several 
times to produce accidental repetitions of eiphertext 
is greatly reduced. Statistically, the chances of 
repetitions of varying length occurring in a given 
number of letters of random text can be eomputed. 
Thus the repetitive phenomenon which may be 
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expected as a result of pure chance can be duplicated, 
and pre ides a means of evaluating the significance 
of repetitions observed in a ciphertext. If the 


obs,·rYeo repetitions are no more than would be 
expected by chance, generally they \Yould not be 


considered significant. However, if the repetitions 
exceed the value of chance repetitions, they would 


be open to interpretation and exploitation as causal 
repetitions. 
c. A summary of the expected numb<•r of ttppeur- 
ances of digraphs, trigmphs, tetrugraphs, and [H'Ilta- 


graphs in samplt>s of random tPxt of 100 to 1000 


letters, in increments of 100 is shown in figun• 


12-3. 


Number 
Expected number of digraphs occurring exactly x times 
of 
letters 
E(2) 
E(3) 
E(4) 
E(5) 
E(6) 
E(7) 
E(&) 
E(9) 
E(lO) 


• 
100 
6.21 
0.298 
0.011 
200 
21.8 
2.12 
0.154 
0.009 
300 
42.5 
6.23 
0.683 
0.060 
0.004 
400 
65.3 
12.8 
1.87 
0.220 
0.022 0.002 
500 
88.1 
21.6 
3.97 
0.582 
0.071 0.008 
600 
110 
32.3 
7.11 
1.25 
0.184 
0.023 
0.003 
700 
129 
44.3 
11.4 
2.35 
0.403 
0.059 
0.008 
0.001 
800 
145 
57.1 
16.8 
3.96 
0.777 
0.130 0.019 
0.003 
900 
158 
70.1 
23.2 
6.16 
1.36 
0.257 0.043 
0.006 
0.001 
1000 
169 
83.0 
30.6 
9.03 
2.21 
0.466 0.085 
0.014 
0.002 I 
- 
------ 


Number 
Exp. number of trigraphs 
Number 
Tetragraphs 
Number 
Penta- 


o"f 
of 
of 
graphs 


letters 
E(2) 
E(3) 
E(4) 
letters 
E(2) 
.E(3) 
letters 
E(2) 


100 
0.269 0.001 
100 
0.010 
100 
200 
1.10 
o.oo4 
200 
0.043 
200 
0.002 
300 
2.48 
0.014 
300 
0.096 
300 
0.004 


4oo 
4.40 
0.033 
400 
0.171 
4oo 
0.007 
500 
6.85 
0.064 
500 
0.270 
500 
0.011 
600 
9.81 
0.111 
0.001 
600 
0.389 
6oo 
0.015 
700 
13.3 
0.175 
0.002 
700 
0.530 
700 
0.021 
800 
17.3 
0.261 
0.003 
800 
0.693 
Boo 
0.027 
900 
21.8 
0.371 
0.005 
900 
0.877 
900 
0.034 
1000 
26.8 
0.505 
0.008 
1000 
1.08 
O.Ou1 
1000 
0.042 


----- 
--- --- 
----- 
'- 
- 
----------------~ 


Figure 12-3 <f;. Table of expected polygraphs ( U). 


The numbers in columns E(2), E(3), etc., refer to 
the numbers of times a given number of digraphs can 
be expected to occur by chance in the sampling of 
letters given in the colur;nn at the left margin. Thus 
in a sample of 300 letters of random text, i.e. periodic 
polyalphabetic substitution, 43 digraphs can be 
expected to appear twice, 6 digraphs can be expected 
to appear 3 times, and 1 digraph can be expected 
to appear 4 times. The decimal fractions that 
follow in the succeeding columns of the same row 
may be interpreted as follows: the value 0.683 under 
column E(4) means that in 100 samples of 300 letters 
each, about 68 of them will have a digraph which 
occurs 4 times; 0.060 under column E(5) indicates 


that in 100 samples of 300 random letters, 6 samples 
will contnin a digraph occurring 5 tinws Thus in tlw 


tables, the numbN within the brnckcts indica tL•s t hP 
numbPr of polygraphs, and thP numbl'I" in Ptteh 


column below that symbol indieatps thP numb<•r of 


timt•s of tht>ir occurrence in a mpssngP or ml•ssngt•s. 


12-8. ~ 
Determining Periodicity 
a. Using the statistical information contained in 
the foregoing table, the determination of periodicity 


of a cryptogram is a rPlath'ely simplP matter. As nn 


illustration, the following cryptogram sho\\·n in 
figure 12-4 with repeated groups mHkrlined. will 


be used. 
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A 


D 


c 


D 


5 
10 
15 
20 
25 


USYES 
ECPMP 
LCCLN 
XBWCS 
OXUVD 


SCRHT 
HXIPL 
IBCIJ 
USYEE 
GURDP 


AYBCX 
OFPJW 
JEMGP 
XVEUE 
LEJYQ 


MUSCX 
JYMSG 
LLETA 
LEDEC 
GBMFI 


Figure 12-4 (C). Ciphertext with evidence of periodicity (U). 


b. In the message above, the observed repetitions 
are far in excess of those normally expected. For 
example, 7 digraphs are observed being repeated 
twice (Ee. PL, Se, BC, JY, US, and CX), about 
the expected values for a message of 100 letters. 
However, note that 2 other digraphs (LE and US) 


are repeated 3 times, a rate of repetition expected 
in the case of a message of 200 letters. Finally, the 
repeat of the tetragraph ( USYE), statistically 


Repetition 


expected in a random text message of 1000 letters, 
establishes almost beyond any doubt that the repeats 
are causal rather than accidental. The only explana- 
tion is that the plaintext value for USYE must fall 
in exactly the same relative position to the key in 
both instances. 


12-9. ~ 
Factoring To Determine Length of the 
Period 
a. Since periodicity, as reflected in causal repeti- 
tions, is a result of enciphering identical letters by 
identical cipher sequences, it follo\vs that the 
length of the period can be ascertained by determin- 
ing the constant interval between repeated occur- 
rences of the same digraph or polygraph. For ex- 


ample, by counting the letters inten·ening b<>t,,·een 


each rE'peat, the eount to inelud0 the' letters of tlw 


first but not the second appearance of the repeat, 


the following intervals and factors \\-ill be found 
(fig. 12-5). 


Interval 
Factors 


1st USYE to 2d USYE--------------------------- 
l~o 
2 ' 4 ' 5 ' 8' 10 ' 20 


1st BC to 2d BC------------------------------- 
16 
2' 4' b 


1st CX to 2d CX------------------------------- 
25 
5 
1st EC to 2d EC----------~-------------------- 
88 
2' 4' 11' 22 ' 44 
1st LE to 2d LE------------------------------- 
16 
2, 4, 8 
2d LE to 3d LE-------------------------------- 
4 
2 
1st LE to 3d LE------------------------------- 
20 
2, 4, 5, 10 


1st JY to 2d JY------------------------------- 
G 
2' 4 
1st PL to 2d PL------------------------------- 
24 
2 , 3 , 4 , 6 , G , 10 , 12 
1st SC to 2d SC------------------------------- 
52 
2, 4, 13, 2G 


(1st SY to 2d SY~ already included in USYJ:;.) 


(1st US to 2d US~ already included in USYE.) 


2d US to 3d US-------------------------------- 
36 
2 , 3 , 4 , G , 9 , 18 
1st US to 3d US ------------------------------ 
76 
2, 4' 19, 38 
(1st YE to 2d YE, already included in USYL'.) 


Figure 12-5 t· List of repetitions and factors (U). 


b. After determining the interval between all 
repetitions, each in turn is factored, the object here 
being to locate one factor which is common to all. 


Recall that a given key length, synonymous with 


the number of cipher sequences, determines the 
periodicity of a system. Further, note that any given 
causal repetition occurs as the result of the cnci- 
pherment of a group of identical letters by the same 
key sequence. Now this may occur at the first, sec- 
ond, third, etc., cycle of key usage. In any case, it 
must be a permutation of a fixed number, the key 
length. Therefore, factoring the intervals should 
reveal the true key length. Similarly, if one or more 


intervals are found which cannot be factored by 
some number as the majority of tlw intervals, they 
can be assumed to be acci(!Pnttll repetitions. \Yith 


this in mind, cxnmine the faeton> given in figun• 


12-5. 
c. It will be noted that with the exception of 
ex, all the repetitions ean be factored by Pit}wr 2 
or 4. In the case of ex, since its factor is both differ- 
ent and isolated, its repetition can be ascribed to 
accidental rather than causnl reasons and can, 


therefore, be dropped from furtht>r study. Thus only 
the factors 2 and 4 arc left for considnation. Sinec 


these factors arc common to all intl•rnlls between 
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repetitions and since the repetitions have been 
determined to be causal rather than accidental, the 
key length, or number of cipher alphabets, must be 
one or the other of these numbers. 
d. In this particular case, the final choice for the 
key length cannot be resolved except by reducing 
the ciphertext to its monoalphabetic components. 
However, on the basis of practicability, it can be 
assumed that the key length is four rather than two. 
In cases of multiples it is better to assume the larger 
number initially. 


1 2-1 0. <J6 Reduction to Monoalphabetic Terms 
a. In foregoing paragraphs, the inherent mono- 


alphabeticity of segments of a periodic polyalpha- 
betic cipher are demonstrated. As this monoalpha- 


beticity arises from the cyclic encipherment of the 
plaintext by a fixed number of alphabets, a poly- 


alphabetic ciphertext can be reduced to mono- 


alphabetic terms when it is divided into segments 
by a number which corresponds to the key length. 
The division of the ciphertext can be accomplished 
by either setting the message down in columnar 
form, each column representing the use of one 
enciphering alphabet, or by transcribing the message 


into groups equal in length to the key. Each group 
then represents one periodic cycle of cipher alphabet 
usage. In either case, the results are the same, the 
choice of method left to the analyst. Using the 
latter method the example message would 
be 
transcribed as: 


USYE 


HTHX 


FPJW 


GLLE 


SECP 


I P L I 
JEMG 
TALE 


MPLC 
BCIJ 
PXVE 
DECG 


CLNX 
USYE 
UELE 


BMFI 


BWCS 
EGUR 


JYQM 


oxuv 


DPAY 
us ex 


DSCR 
BCXO 
JYMS 


b. Each group above represents the periodic cycle 
of the cipher sequence. Thus all first letters of each 
group are produced by the first cipher alphabet, 
the second letter by the second alphabet, and so 
forth. With the monoalphabetic segment of the 
ciphertext now isolated, a separate uniliteral fre- 


quency distribution is made for each. Theoretically, 
if each distribution is great enough, and contains 
no abnormal variation from common usage, each 
frequency distribution should result in the charac- 


teristic peaks and troughs of monoalphabetic sub- 


stitution. Under normal circumstances, where the 
correct period has been determined, this oceur·s 


and seems to prove the correctness of the assump- 


tion of period lengths. However in more difficult 
cases, where the sample is small, and contains an 
insufficient number of polygraphic repetitions, or 
where a clear cut choice between two possible factors 


of periods cannot be made, other monoalphabeti(' 
substitution tests may be used. 


Section Ill. c¢ STATISTICAL TEST FOR DETERMINING PERIODICITY 


12-11. ~ 
The Phi (ct») Test 
a. The monoalphabetic If» test, previously dis- 


cussed in paragraph 2-15, may be applied to the 
distribution of periodic polyalphabetic ciphers to 


confinn the monoalphabeticity of the distribution 
made on the assumption of a given period. This test 
is particularly applicable in difficult cases where each 
distribution is noncommittal in respect to peaks and 
troughs, as where the factoring process results in the 
choice of two possible period lengths. When the 
correct period is assumed, then the q, test of each 
distribution should approach fairly closely and con- 


sistently the values for rf,p. On the other hand, if an 
incorrect period is assumed, the calculated cf»o should 
approximate the value of q,r rather than cf»p. 


b. To illustrate this process, cf»o of the distributions 
made of the example cryptogram is calculated in 
figure 12-6 using the formula cf»o=l:f(f-1). 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
0 12 0 6 0 0 0 0 0 6 0 0 0 0 0 0 0 0 0 0 12 0 0 0 0 0 


;l-25 


~P • .o667N(~-1) = 4o.o2 
~o = ir(r-1) = 36 


~r "' .0385!1(!1-1) = 23.10 


A B C D E F G H I J K L M I 0 P Q R S T U V W X Y Z 
0 0 2 0 12 0 0 0 0 0 0 2 0 0 0 12 0 J 12 0 0 0 0 2 2 0 


N-25 


4lp • .0667r!(N-1) "'40.02 
~o = ~f(f-1) = 44 
'r • 
.0385N(ll-l) • 23.10 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
0 0 20 0 0 0 0 0 0 0 0 20 2 0 0 0 0 0 0 0 2 0 0 0 2 0 


;t-25 


~P • .o667!!(N-1) = 4o.o2 
~o "' ~f(f-1) = 46 
'r • .0385N(N-l) a 23.10 


:i-25 


A B C D E F G H I J K L M ~ 0 P Q R S T U V W X Y ~ 
0 0 0 0 30 0 2 0 2 0 0 0 0 0 0 0 0 2 2 0 0 0 0 6 0 0 
f(f-1) 


~p = .0667!!(!1-1) = 40.02 
~0 = ~f(f-1) = 44 


~r" .0385N(11-1) = 23.10 


Figure lf-6 (C). The <1> te8tfor factored periods (U). 
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c. In this case, the results of the rf> test are indica- 
tions that each alphabet represents a case of mono- 
alphabetic substitution, which in turn proves the 
validity of the original determination of the cipher's 
period. Note that in some cases a rf> test conducted 
on the multiple of a true_ period will result in the 
appearance of monoalphabeticity. An example occurs 
in this particular case where, if eight was assumed' 
the resultant distribution and their cf> tests indicate 
monoalphabeticity. However, an inspection of the 
distribution reveals that on the basis of similar 
characteristics distributions 1 and 5, 2 and 6, 3 and 7, 
and 4 and 8, could be combined into 4. Whatever 
the method used, the result is the same, the reduction 
of the ciphertext to monoalphabetic terms. 


12-12. (12.') The Index of Coincidence (I. C.) 


a. Another method of proving the apparent valid- 
ity of the factoring process is through the use of the 
index of coincidence. The I.C. was previously defined 
as the ratio of rj>o to rj>r, expressed in formula as 


I.C.= :~·The monographic I.C. of English plaintext 


is 1.73 as compared with the I.C. of 1.00 for random 
text. Using this text, the individual distributions, if 
the factoring process is correct, will tend to conform 
more closely to the expected I.C. of plaintext than 
to the I.C. of random text. 
. b. To demonstrate the operation of the formula 
and show its results for comparison with those 
obtained by the 4> test, the foregoing distribution" 


and the calculated values of 1/>0 and cpr will be used 


(fig. 12-7). 


N 
fl>r 
f/>p 
N 
fl>r 
fl>p 
N 
(/Jr 


11 
4.23 
7.34 
29 
31 
54 
47 
83 
12 . 
5.08 
8.80 
30 
33 
58 
48 
87 
13 
6.00 
10.4 
31 
36 
62 
49 
1 
90 


14 
7.00 
12.1 
32 
38 
66 
so ! 94 
IS 
8.08 
14.0 
33 
41· 
70 
51 
98 
16 
9.23 
16.0 
34 
43 
75 
52 
102 


17 
10.5 
18.1 
35 
46 
79 
53 
106 


18 
11.8 
20.4 
36 
48 
84 
54 
110 


19 
13.2 
22.8 
37 
51 
89 
55 
114 


20 
14.6 
25.3 
38 
54 
94 
56 
118 
21 
16.2 
28.5 
39 
57 
99 
57 
123 
22 
17.8 
30.8 
40 
60 
104 
58 
127 
23 
19.5 
33.8 
41 
63 
109 
59 
132 
24 
21.2 
36.8 
42 
66 
115 
60 
136 
25 
23.1 
40.0 
43 
69 
120 
61 
141 
26 
25.0 
43.4 
44 
73 
126 
62 
145 
27 
27.0 
46.8 
45 
76 
132 
63 
!50 


28 
29.1 
50.4 
46 
80 
138 
64 
!55 
---- 
--------- 
-- -~L..-.----- 


IC for Distribution ~o. 1 


~ = IC or 
36 = 
~ 
23 


IC for Distribution Ho. 2 


~ • 
IC or 


IC for Distribution 


r,: = 
IC or 


44 


23.1 


ilo. 3 


46 
23.1 


IC for Distribution :Io. 4 


~ = IC or !!:..__ 
fr 
23.10 


1.00 
IC of Sn~lish ~andom ~est 


1. 56 
1.73 
IC of Enelish Plain '!'ext 


L 00 
IC of l::pglis:1 Rand orr. 'lext 


1.91 
1. 73 


1.00 


1.99 


1. 73 


IC of :::ngliso Plain ':'ext 


IC of ~nglish Random Text 


IC of Ene;lish Plain Text 


l.OG 
~C of Fnrlish ?anCo~ ~ext 


1 'J1 


1.73 :c o~ ~nrlish ?lain Text 


Figure 12-7 cj>. Index of coincidence for factored periods ( U). 


c. In all four cases above, it can be sPen that the 
I.C. calculated for each distribution more closdy 


approximates the I.C. of plaintext than that of 
random text. Thus, as in the case of the 4> tPst. thP 


results, i.e. the monoalphabeticity of each distribu- 


tion is indicated, further indicatP that the initial 
assumption of a perio(t of four is correct. 


12-13. ~Table of Expected Values 


As an aid in the calculation of either monographic 
I.C. or rf> values, a table of the expected values of rf>p 


and rj>r for sample sizes from 11 to 100 is given belo\\- 


in figure 12-8. To use the table (fig. 12-8), only thP 


value of N, the total number of letters occurring in 


a given distribution, need be tabulated and the values 


of 1/>0 determined. 


C/Jp 
N 
fl>r 
C/Jp 
N 
(/Jr 
C/Jp 


144 
65 
160 
277 
83 
262 
454 


!50 
66 
165 
286 
84 
268 
465 
157 
67 
170 
295 
85 
275 
476 
163 
68 
175 
304 
86 
281 
488 


170 
69 
180 
313 
87 
288 
499 
177 
70 
186 
322 
88 
294 
511 
184 
71 
191 
331 
89 
301 
522 
191 
72 
197 
341 
90 
308 
534 
I 


198 
73 
202 
351 
91 
315 
546 


205 
74 
208 
360 
92 
322 
558 
213 
75 
213 
370 
93 
329 
571 
221 
76 
219 
380 
94 
336 
583 
228 
77 
225 
390 
95 
343 
596 
236 
78 
231 
401 
96 
351 
608 


244 
79 
237 
411 
97 
358 
621 
252 
80 
243 
422 
98 
366 
634 
261 
81 
249 
432 
99 
373 
647 
269 
82 
255 
443 
100 
381 
660 


Figure 1 S-8 (ff{. Expected value8 of q,r and tf>p ( U). 
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12-14. ~Statistical Tests to Determine Peri- 


odicity 
a. A variation of the q, test may be used for the 
initial determination of periodicity, as opposed to 
proving a prior assumption as illustrated above. Thi~ 


particular method is quite useful in those cases where 
the length of the period is long as compared to 
ciphertext length, and where there is. no pronounced 
repetition pattern in the text itself. For example, 


given the cryptogram below where the length of the 
key is between 40 and 50, it can be treated as shown. 


(1) First, an arbitrary key length is selected and 
the cryptogram is \vritten.out horizontally to conform 


to thnt width. Selecting a key width of 40, the 
ciphertext is inscribed as folkJ\n; in fignw 12-9 and 
the cpol":f(f-1), of each column is compnt<•d. using 


only repented letters. 


1 
1 
2 
2 
3 
3 
4 
5 
0 
5 
0 
5 
0 
5 
0 
HSKUSPMFHDUJJIXMSPTPOIPCIWKZVUYPPNEUSAIC 
B03GA3PGPRHB3UCSH~VC~QXZSACKRKVBGH~V~FFY 
TTKHKVWZXVLIJHWAFYKFIJSLTMWiAH~TUVTX~0~C 
Pc~KTGOOYBxiVLIJ~YACDWEJMSC~FPIEAXoKKcJw 
EXPY~Q~DNQJfXNZ~~~UQQARFUE~JOYbDQK£IKfL~ 
TDVEVLETDOAFROUNYNBDVQOBEGGSHQHXUPUZCOC& 
KKzr!~~xR¥ccQAsBz~c~u~nuNovTPoruizvEPQFv 


K Z 


4 0 2 0 2 2 2 0 0 2 0 2 4 0 0 2 2 4 0 2 2 2 0 0 0 0 2 2 0 0 2 0 2 0 2 0 6 2 0 2 


Figure 12-9 c_jl. Computation of 4>0 long periodic key (U). 


(2) To compute the cpo, the normal formula is 
used, i.e. cpo=l":f(f-1). Note that in the diagram 
above, there are 2 columnar lengths; one of 8 letters 
(2 columns) and the other of 7 .letters (38 columns), 
which must be kept separate. This data contained in 
the diagram is then tabulated as shown below. The 
column labeled q, is the observed value of q, from the 


table above. The column labeled x is the number of 
times the particular q, value occurred, and q,x is thr 


product of the two columns q, and x. 


Columns 
N=8 


' 
! 
• 
I 
q, I x I cpx 
--1--1-- 


0 I 1 
0 


2 
1 
2 


I 


2 
2 


Columns 
N=7 


q, I x I cpx 


--·--~-- 


0 
17 
0 


2 
19 
38 
4 
1 
4 
6 
1 
1 


38 
43 


(3) Having derived the cpx value by tabulating 
the data as shown above, it then can be used to 
determine the average value of q, (symbolized by 


~. which is read as Phi Bar). This is done using the 


formula ~=cpx for each N value. The average value 


X 


of q, ("¢;) is derived by adding up all the cpx ,-alues 


for a given column length, and thPn diYiding by 


the number of occurrences of col urnn,.; of that 
length. Thus "¢; for the above nn': 


~=8 
:\ =7 
- 
cpX 
2 
cp=-=-=1 


X 
') 
~ 


- 
cpx 
43 
cp=-=-=1.16 


X 
:38 
-cp=1 
cp=l.16 


(4) For comparison purposes. the value uf q,r 


and <t>p must be computed using the formultls: 


<Pp=0.0667N(N-1) 
or 
0.0667 x S x 7=:3.70 
<t>r=0.0385N(N'-1) 
or 
0.0385 x ~ x 7=2.15 


<t>p=0.0667N(N-l) 


<t>r = 0.0385N (N-1) 


and 


or 
0.0667 x 7 x 6=2.80 


or 
0.0385 x 7 x 6= 1.61 


The information now is set up in a table for com- 
parison purposes as shown below: 


N=8 
:\' 
~ 
. =I 


Observed 
q, 
1.00 
<P 
1.16 


Expected plain 
cpp 3.73 
<Pp 
2.SO 


Expected random q,r 
2.15 
cpl' 
1. 6 l 


15) On the basis of the compari"on nbo,·e, a 


key width of 40 is rejected. The next ,.;tep then is to 


as,.;ume another key length, reinscribe the message 


to that width, and recompute all ,-alue,.; again. 


This sume process is repented until a good match 


is attained. In this specific case the process would 
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be repeated until a width of 43 was reached. The 
computation at this point would appear as shown 
in figure 12-10. 


H S K U S P M F H D U J J I X U S P T P 0 I P C I W K Z V U Y P P N E U S A I G B 0 0 
GAOPG¥RHBO~C~HP~~H~X~~A~KR~~BGHMVSfRYTTi~iV 
~zxviiJi~A~L~~IJSLT0~Ki~~T~~TxsHEc¥csxfcooy 
axzVIIJRYAcvwEJliscXFPiiAxoxXQvwfxPYPQnDroJI 
XN!J~N~DOARFUERJ~YBDO~EIKD~VTDVEVLETDOAf'~OU 
NY~BDVQOBE~GS~QiXOPV~C~C~KK~IfPi~Rfcc~JssiV 
GBV~BUN~VTPOVH£ZDEEQPVK~ 
-- 


2 0 2 4 4 4 2 4 2 6 4 0 2 4 2 4 6 0 4 0 4 4 4 6 2 0 4 8 2 2 0 4 2 0 4 2 2 2 4 2 4 6 2 


Figure 12-10 rJJ1. q,o long periodic key computation (U). 


(6) Again the average value of 4> 
(~) is com- 
puted, as are lj>r and 1/>p, using the formulas previously 


4> 
0 


2 
4 


Columns 
N=7 


X 
1/>X 


4 
0 


6 
12 
11 
44 


i 


given, and the derived data is set forth in tabular 


form as below: 


4> I 
o I 


2 
I 


4 


Columns 
N=6 


X 


I 
3 
9 
I 
4 


1/>X 
0 


18 
16 
I 


3 
18 
I ~=I/>X= 
74 =3.o8 6 
1 
I 
6 
6 
I 
I 


X 
24 
I 
24 
74 
8 
1 
8 
I 
i - 
1/>J: 
62 
14 
1 
I 14 
I 
I lj>-:-:-~=-=3.26 


19 
62 
X 
19 


N=7 
N=6 


Observed 
¢ 13.08 I 
3.26 


Expected plain 
4>P I 2. so i 
2.00 
I 
--i 
Expected random 


b. "The results of the last test leave little doubt 
that the key length of the cipher is 43. Consequently, 
analysis is based on that assumption. Obviously thi::; 


process is rather involved in terms of repeated 


lj>r I 1. 66 I 
1. 15 


application of the snme te::;t. Ho\\·eyer. i11 tll<•"e t·ase,; 


where the key i::; long, or \\-here no repe:t t, "'"'"Ill' in 


the text to indicate key length, it i;; :ttl t>ll"<'• tt\P tool. 
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CHAPTER 13 ~ 


SOLUTION OF PERIODIC POLY ALPHABETIC SUBSTITUTION SYSTEMS 


Section I. ¢'SYSTEMS USING STANDARD CIPHER ALPHABETS 


1 3-1 . (J2[ Determination 


Alphabet 


of 
Type 
Cipher 


a. Once a given periodic polyalphabetic cipher 
has been reduced to monoalphabetic terms, the 
question arises as to what type cipher alphabet is 
involved. This should be determined in the initial 
stage of analysis as it directly affects the techniques 
employed, anq moreover, determines the relative 
difficulty of the task of recovering plaintext values. 


b. In practice, the type cipher alphabet used in 
a given system may be one of the forms given in 
paragraph 12-4 preceding. As the cipher letters, of 
themselves, give no hint of the exact form used, the 
analyst must determine this. As in the case of normal 
monoalphabetic substitution ciphers, a uniliteral 
frequency. distribution may be used for this deter- 
mination. Such a frequency distribution made of 
each factored segment, given sufficient depth for 
each, will usually indicate whether the cipher alpha- 
bets involved are standard (direct or reversed) or 
mixed. 
c. In some cases only two or three distributions 
are necessary for the initial determination of the 
type cipher alphabet involved. However, for subse- 
quent analysis a distribution must be made for 
each. Additionally, if the alphabet appears to be a 
mixed cipher alphabet, then it is helpful for subse- 


quent analysis to prepare triliteral frequency distri- 


butions for each. Note that because of the reduced 
size of the distribution, the characteristics which 
permit the identification of the type alphabet may 
not be as pronounced as those given in previous 
examples. However, if one takes into consideration 
the reduced size of the sample, identification can 
usually be made. 
d. Once the identification of the alphabets in- 


volved has been made, an analysis of each to deter- 


mine their plaintext values can begin. Basically the 
techniques involved are similar to those previously 
explained for the analysis of monoalphabetic substi- 


tution ciphers. There is one difference which arises 
out of the use of several cipher alphabets which 
may or may not be related, and which therefore 


permits the use of an additional method. Generally, 
although the actual analysis may be more involved, 
it is difficult only in those cases where a reduced 
depth of material is enconntered. The difficulty 
stems from the lack of data, not from its complexity. 


However, where messages are long, or where several 


messages have been enciphered in the ,;arne key, 


each distribution should contain sufficient elements 
to permit a ready identification of ciphertext ndues. 


13-2. ~Preliminary ldentiAcation and Factor- 
ing 
a. Using the prineiples for analysis set forth in the 
preceding chapter, a cryptogram is prepared in the 
normal manner as illustrated in figure 13-1. 


5 
10 
15 
20 
25 


A 
A !!...£..!!_ Y 
J ~ 
K I 
Z Y ;.J W ,1; 
J ,,; I :; X 
;; P N L X 


B 
E T I /.J I 
Z H B H R 
A !...!:!. Z ij__I L V 1·1 E 
J K U T G 


C 
D P V X x--Q' U K H Q 
L H V R 1·1 
J A Z li G 
G Z V X E 


D 
NLUP/1 
PZJNV 
CHUAS 
HKQCJK 
IPLWP 


E 
AJZXI 
GUf.JTV 
Df....'!.....!J 
EC11YS 
QYBAV 


F 
ALA!!..J.. 
POIXfl 
PVIIYE 
EYXEE 
UDPXR 


G 
BVZVI 
ZIIVO 
SPTEG 
KUBBR 
QLLXP 


H 
W F Q G K 
N L L L E 
P ': I K W 
D J Z X I 
G 0 I 0 I 


J 
£.f.._1 M V 
K P rt W F 
II P L 2 I 
C V V P 1.' 
3 K ': X G 


K 
f/ LMD F 
A A E X I 
J L U F f.1 
P Z J !I V 
C A I G I 


L 
UAWPR 
NVIW~ZAS ~F~: HS 


Figure 13-1 (C). Ciphertext prepared for analysis ( U). 


b. After the cryptogram is set down, it is inspected 
for repeated sequences, and those found are under- 


lined as sho\\'n. In this particular case "·here a num- 


ber of trigraphs and polygraphs are repeated, it is 
not necessary to bother ''ith the digraphs. The reason 


for· this can be understood if reference is made to the 
table of expectancy in paragraph 12-7c. In this 
message of 27i groups, five trigraphs are observed 
occurring twice each, better than twiee that expected. 
Moreover, the odds for the observed recurrence of 
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the pentagraph is on the order of 1 in 50. The point 
is that these repetitions would almost certainly be 


·causal rather than accidental und therefore could be 
used for factoring to determine the period of the key. 
c. On this basis the repetitions may be set dom1 


in tabular form with their locat.ions, interval, and 


factors for study as shown below. 


Repetition 
Location 
Interval 
Factors 


QGK 
D18, H3 
S5 
.;, 17 


UKH 
A2, C7 
,jii 
.;, 11 
ZLA 
Jl, L16 
6.') 
.), 13 


d. Only the briefest inspection of the list of factor,; 
is required to reach the assumption that the period 


length is five. This being the case, a llniliteral 


frequency distribution is made of ti1e text nt an 


interval of five. Note that it is not neces,.;ar.v to 
retranscribe the text \vhen group length, or its 


multiple, corresponds to assumed key length. Ac- 


cordingly, the following distributions \mulrl be 
produced (fig. 13-2). 


Repetition 
Loration 
Interml 
Factors 
LUF::VIPZJNYC D2, K12 
160 
2, 4, 
~. 8, 10, 16, 20, 


JZXIG 


EJK 


PTE 


32, 40, so 


E2, H17 
90 
2, 3, •\ 6, 9, 10, 1.~, lH, 
30, 4;) 
B20, L10 
215 
.), 43 
E12, G12 
.'>0 
2, 5, 10, 25 


(1) 
Distribution 1. 


~ -- 
- 
g 
g 
~- 
--- --- 
- 
- 
---- --- -- 
- 
- 
D E F G H I 
J K L M N 0 P Q R S T U V W X Y 


3 3 0 3 2 2 
6 2 1 0 
6 1 
5 3 0 1 0 2 0 1 0 0 


~ 
z 
6 
A B C 


5 1 2 


20 0 2 6 6 0 6 2 2 30 2 0 0 30 0 20 6 0 0 0 2 0 0 0 0 30 


~r = 114 
~p = 198 
IC = 1.44 


(2) 
Distribution 2. 


_!!!! 
:E 
- 
- 
-~ 
- - -- 
-- 
- ---- 
=~ 
A B C D E F G H I J 
K L M N 0 P Q R S T U V W X Y Z 
5 0 1 1 0 3 0 3 1 2 
4 
9 


20 0 0 0 0 6 0 6 0 2 12 72 


~r = 114 
~P = 


1 0 2 
5 0 0 1 2 
4 
4 0 0 
4 3 


0 0 2 20 0 0 0 2 12 12 0 0 12 6 
198 
IC = 1.61 
. 


(3) 
Distribution 3. 


::z __ = = - 
=· = = 
c __ - 
~- 
-- 
- 
- 
,e= __ 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y 


3 3 0 0 2 0 0 0 
8 2 2 
4 
8 1 0 1 2 0 0 3 
4 
5 1 1 0 


6 6 0 0 0 0 0 0 56 2 2 12 56 0 0 0 2 0 0 6 12 20 0 0 0 


~r = 110 
~o = 190 
IC = 1.8 


(4) 
Distribution 4. 
---- 
-- 
- 


$ z 
5 


20 


--- 
-~ 
- 
---- 
---- 
- -- -- 
-~ -- - - - 
------ - - - - 
-- 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
3 1 0 1 3 
4 
4 
4 0 0 2 2 3 3 1 1 0 1 0 2 0 2 
4 9 2 
2 
6 0 0 0 6 12 12 12 0 0 2 2 6 6 0 0 0 0 0 2 0 2 12 72 
2 
2 


~r = 110 
~p = 190 
IC = 1.58 


(5) 
Distribution 5. 


S 
- 
:a 
.il 
- 
}! 
- 
- 
-- 
== = 
-= 
-=-== 
==== 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


0 0 0 0 
6 2 
4 0 
9 1 3 0 
7 0 1 2 1 
4 3 0 0 
5 2 2 2 0 
0 0 0 0 30 2 12 0 72 0 6 0 42 0 0 2 0 12 6 0 0 20 2 2 2 0 


~r = 110 
~p = 190 
IC = 1.91 


N = 55 


$o = 164 


H = 55 


h = 184 


N = 54 


~0 = 200 


N = 54 


~0 = 174 


n = 54 


~0 = 210 


Figure 13-$ <p1. Uniliteralfrequency distribution of ciphertext on period of five (U). 
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13-3. C'fFitting the Distribution to the Normal 


a. The statistical tests completed show that each 
distribution is apparently plaintext, exhibiting the 
expected characteristics of monoalphabetic substi- 
tution and thereby proving the assumption of a 


period of five. This being the cas~, the next logical 
step is to determine if a mixed or standard sequence 
was used. If the latter, the solution would be greatly 
simplified by a determination of the point of coin- 
cidence between the plain and cipher sequenees 


which would establish all equivalent values. Al- 
though the peaks and troughs of the above distribu- 


tion are suppressed, a closer inspection reveals their 
presence, and shows that they are distributed 
linearly rather than being bunched; an indication 
that the sequences are standard ruther than mixed. 
With this in mind, an attempt can be made to fit 
them to the normal by the usual process of locating 


high frequency equivalencies. 
b. By noting the relative distances bet\\-een the 
peaks and troughs and their trend, i.e. direct or 
n•vcrsPd of distribution 1, it appears that lrc= Ap. 
Xote that at this point of eoinciden<"e the normall_,- 


expected high frequency plaintext letter;; conform 
to the high frequency cipher letters thusly: 


P 
ABCDEFGHI JKLMNOPQRSTUVWXYZ 
C 
W X Y Z A B C D E F G H I 
J K L 
~1 N 0 P Q R S 
T L' 1' 


Continuing the same process of comparison of the 
peaks and troughs of each cipher sequence with 


that expected for plaintext, it becomes apparent 
that the remaining points of coincidence are: 
Distribution 2 
Ap=Hc 
Distribution 3 
Ap= Ic 
Distribution 4 
Ap= Tc 
Distribution 5 
Ap=Ec 
c. At this point it is obvious that the KEY is 
WHITE and that the arrangement of the several 
sequences is as shown in figure 13-3. 


The text then may be deciphered to read: 


P 
A B C D E F G H I J K L M ~ 0 P Q R S : G V ~ X Y w 


Cl 


C2 


C3 


C4 


C5 


I JIKI4\(Id 


1 
1 
r . 
r r 


W X y z A B C D E F G il 
c I D I,- 
- 
I - 
' -·I . ' I 
l 
. 
:· "t:t\'10:-:'"'1 
I 
' 


H I J K L M N 0 p Q R S T ulv w XIY Z A -lr j [,I· I -I G 
o 
1 
,.... 
..r:::.ic: 


I J K L MN 0 p Q R S T u v W X Y 14 
1A 3 CJDIE 
I 
I 
! 
F GIH i 
I 
. 
T U v w X y Z A B C DIE F G l! I J K L t>: .vioiP "II?js 1 
I 
: 


E F G H I J K L UN o!P Q RIS T (i v w 1 yl z I A B! c I D i 
I 
I 
! 
I 
I 


Figure 13-3 r.J)'(' Recovered enciphering matrix (C). 


ENCOUNTERED RED INFANTRY ESTIMATED AT ONE 


REGIMENT AND MACHINE GUN COMPANY IN TRUCKS 


NEAR EMMITSBURG(.) AM HOLDING MIDDLECREEK NEAR 


HILL FIVE FOUR THREE SOUTHWEST OF FAIRPLAY(.) 
WHEN FORCED BACK WILL CONTINUE DELAYING REDS 


AT MARSH CREEK(.) HAVE DESTROYED BRIDGES ON 


MIDDLECREEK BETWEEN EMMITSBURG TANEYTOWN 
ROAD AND RHODES MILL(.) 


1 3-4. c;.} Completing the Plain Component 


a. As in the case of monoalphabetic substitution 
where direct standard sequences are used, so too can 
periodic polyalphabetic substitution systems, if using 
direct standard sequences, be solved by completing 
the plain component. The underlying principle in 
the latter case is the same, i.e. the cipher sequences 
are nothing more than direct standard sequences 
offset as numbers of positions. Thus by simply 
inscribing a direct standard sequence vertically below 
each cipher letter using it as a point of origin, a 
columnar matrix is developed in which one line of 
plaintext appears. Note that as in the case of simple 
monoalphabetic substitution, but using either a 
reversed standard cipher sequence or a known mixed 


cipher sequence, solution is also possiblt•. but slightly 


different techniques are req uirecl. 
b. In respect to the solution of periodie polynlpha- 


betic ciphers by this method. tlwrP i::; OIH' differencP 
basecl upon the numbPr of gen<'rn t ril'l'"· In mono- 
alphabetic, only one g'l'neratrix. that i:-;. tlw eipher 


sequence, was used constantly throug-hout. In tlw 


case of periodic polyalphabetic ::;y,.;tpms thPrP are of 
course several generatrices involn•d. l'neh ust>d nt a 


constant interval in a fixed sequPntial order deter- 


mined by the period of the key. Thus n slightly 


different approach is required. If for Pxnmple the 
former method was used it \Yottld bP quit<> difficult 
to pick out the individual genpratricPs. This is sho\nl 


in figure 13-4 below, where the plain component \vas 
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AUKHYJAMKIZYMWMJMIGXNFMLX 


B V L I Z K B N L J A Z N X N K N J H Y 0 G N M Y 
C W N J A L C 0 M K B A 0 Y 0 L 0 K I Z P H 0 N Z 


D X N K B M D P N L C B P Z P M P L J A Q I P 0 A 
E Y 0 L C N E Q 0 M D C Q A Q N Q M K B R J Q P B 
F Z P M D 0 F R P N E D R B R 0 R N L C S K R Q C 


G A Q N E P G S Q 0 F E S C S P S 0 M D T L S R D 


completed for the first 25 letters of the foregoing 
cryptogram. 


. H B R 0 F Q H T R P G F T D T Q T P N E U M T S E 
I C S P G R I U S Q H G U E U R U Q 0 F V N U T F 
J D T Q H S J V T R I H V F V S V R P G W 0 V U G 
K E U R I T K W U S J I W G W T W S Q H X P W V P. 


L F V S J U L X V T K J X H X U X T R I Y Q X W I 


M G W T K V M Y W U L K Y I Y V Y U S J Z R Y X J 


H ll X U L W N Z X V M L Z J Z W Z V T K A S Z Y K 


0 I Y V M X 0 A Y W N M A K A X A W U L B T A Z L 


P J Z W N Y P B Z X Q N B L B Y B X V M C U B A M 


Q K A X 0 Z Q C A Y P 0 C M C Z C Y W IT D V C B N 
R L B Y P A R D B Z Q P D N D A D Z X 0 E W D C 0 
S M C Z Q B S E C A R Q E 0 E B E A Y P F X E D P 


T N D A R C T F D B S R F P F C F B Z Q G Y F E Q 


U 0 E B S D U G E C T S G Q G D G C A R H Z G F R 


V P F C T E V H F D U T H R H E H D B S I A H G S 
W Q G D U F W I G E V U I S I F I E C T J B I H T 


X R H E V G X J H F W V J T J G J F D U K C J I U 
Y S ~ F W H Y K I G X W K U K H K G E V L D K J V 
Z T J G X I Z L J H Y X L V L I L H F W ~ E L K W 


c. With the prior kno\vledge of the period (5), and 
the plaintext, it is possible to pick out plaintext from 
the matrix above, but even so it would be a difficult 
task. Where the period or plaintext were not known 


it would he practically impossible. Thus it is neces- 


sary to first separate the ciphertext into its individual 


genera trices. Now this will of course result in the 
factoring of the plaintext at a constant interval. that 
of the period length. So the question of how plaintext 
would be recognized is posed. The answer to this lies 


in the association of high-frequency letters normal 
to plaintext. Each correct generatrix \Yill normally 
contain a greater and better assortment of high- 
frequency letters than the other generatriccs and 


thus is distinguishable. To reconstitute the plaintl'Xt, 
the selected generatrices are reordered according to 
their order of appearance in the ciphertext. To shm,· 


this process, the example cryptograms ,,·ill again bP 


used. In this instance the first 50 letters.. decimated 


at the period of five, is set down in columnar form. 
each column conforming to the use of one cipher 
alphabet as shown in figure 13-5. 
Figure 13-4 cj). Completion of the plain component (U). 


Gen. 
Alphabet 1 
. Alphabet 2 
Alphabet 3 
Alphabet 4 
Alphabet 5 


1 
AJZJNEZAIJ 
UAYMFTHYLK 
I01HHITBMVU 
HKWGLMHZHr 
YU1XXIR!,lEG 


2 
BKAKOFABJK 
VBZNGUIZNL 
LNllJNJCNWV 
ILXJINNIANU 
ZJNYYJSNFH 


3 
CLBLPGBCKL 
WCAOHVJANM 
MOOKOKDOXW 
JMYINOJBOV 
AKOZZKTOGI 


4 
DMCMQHCDLM 
XDBPIWKBON 
NPPLPLEPYX 
KJIZJOPKCPW 
BLPAALUPHJ 


5 
ENDNRIDEMN 
YECQJXLCPO 
OQQMQMFQZY 
LOAKPQLDQX 
CMQBBJ.IVQIK 


6 
FOEOSJEFNO 
ZFDRKYMDQP 
PRRNRNGRAZ 
MPBLQRUERY 
DNRCCN'Y/RJL 


7 
GPFPTKl'GOP 
AGESLZNERQ 
QSSOSOHSBA 
NQCURSNFSZ 
EOSDDOXSKl·"· 


8 
HQGQULGHPQ 
BHFTNAOFSR 
RTTPTPITCB 
ORDUSTOGTA 
FPTEEPYTLN 


9 
IRHRVNHIQR 
CIGUNBPGTS 
SUUQUQJUDC 
PSEOTUPHUB 
GQUFFQZU/10 
10 
JSISWNIJRS 
DJHVOCQHUT 
TVVRVRKVED 
QTFPUVQIVC 
HRVGGRAVNP 


11 
KTJTXOJKST 
EKIWPDRIVU 
UWWSWSLWFE 
RUGQVWRJWD 
ISWHHSBWOQ 


12 
LUKUYPKLTU 
FLJXQESJWV 
VXXTXTUXGF 
SVHRWXSKXE 
JTXII1'CXPR 


13 
MVLVZQLMUV 
GMKYRFTKXW 
WYYUYUlJYHG 
TWISXYTLYF 
KUYJJUDYQS 


14 
NWMWAR14NVW 
HNLZSGULYX 
XZZVZVOZIH 
UXJTYZUMZG 
LVZKJ<.VEZRT 


15 
OXNXBSNOWX 
IOMATHVMZY 
YAAWAWPAJI 
VYKUZAVNAH 
MWALLWFASU 


16 
PYOYCTOPXY 
JPNBUIWNAZ 
ZBBXBXQBKJ 
WZLVABWOBI 
NXBf.!MXGBTV 


17 
QZPZDUPQYZ 
KQOCVJXOBA 
ACCYCYRCLK 
XAMWBCXPCJ 
OYCNNYllCUW 


18 
RAQAEVQRZA 
LRPDWKYPCB 
BDDZDZSDML 
YBNXCDYQDK 
PZDOOZIDVX 


19 
SBRBFWRSAB 
MSQEXLZQDC 
CEEAEATE!n-1 
ZCOYDEZREL 
QAEPPAJETIY 
20 
TCSCGXSTBC 
NTRFYMARED 
DFFBFBUFON 
ADPZEFASFM 
RBFQQBKFXZ 
21 
UDTDHYTUCD 
OUSGZNBSFE 
EGGCGCVGPO 
BEQAFGBTGll 
SCGRRCLGYA 


22 
VEUEIZUVDE 
PVTHAOCTGF 
FHHDHDWHQP 
CFRBGHCUHO 
TDHSSDMHZB 


23 
WFVFJAVWEF 
QWUIBPDUHG 
GIIEIEXIRQ 
DGSCHIDVIP 
UEITTENIAC 
24 
XGWGKBWXFG 
RXVJCQEVIH 
HJJFJFYJSR 
EHTDIJEWJQ 
VFJUUFOJBD 


25 
YHXHLCXYGH 
SYWKDRFWJI 
IKKGKGZKTS 
FIUEJKFXKR 
WGKVVGPKCE 


26 
ZIYIMDYZHI 
TZXLESGXKJ 
JLLHLHALUT 
GJVFKLGYLS 
XHLWWHQLDF 


Figure 18-5 yn. Completion of the plain component, text arranged by period (U). 
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When the high-frequency generatrices underlined 
above are set down in columns, the now consecutive 
letters of intelligible plain text are readily recog- 
nizable. 


1 
2 
3 
4. ··5.· 


5 20 19 8 23 
E N C 0 U 


NT ERE 
D R E D I 
N F A N T 
R Y E S T 
I M A T E 
D AT 0 N 
E R E G I 
MENTA 


NDMAC 


ALPHABET 
GENERATRIX 


13-5. (~ Selection of Generatrices 
a. The foregoing demonstrates how quickly a 


solution may be reached using this technique once 
the system has been identified and the period deter- 
mined. However, the real key to the solution lies in 
the selection of the correct generatrix from each 
alphabetic column. As shown, it was selected on the 
basis of the appearance of high-frequency letters in 
the generatrix. Another method of selection may be 
used which involves a more systematic approach 
than mere visual inspection, again using frequency 
characteristics of plaintext. The probability of the 
low-frequency letters J, K, Q, X, and Z appearing 
two or more times in a given generatrix is unlikely 
so they may be immediately dropped from considera- 


tion. For example, the generatrices of alphabet 1 
shown crossed out in figure 13-6 could be dropped. 


Gen. 
ALPHABET 1 


1 
A-J-~-J-H-E-~-A-£-J 


2 
B-K-A-K-~-F-A-B-J-K 


3 
CLBLPGBCKL 
4 
DMCUQHCDLM 


5 
ENDNRIDEM!l 
6 
FOEOSJEFNO 


7 
GPFPTKFGOP 


8 
H-~-G-~-Y-b-G-H-P-Q 


9 
IRHRVNHIQR 
10 
J-8-£-8-W-N-£-J-R-B 


11 
K-~-J-~-~-~-J-K-8-~ 


12 
b-Y-K-Y-¥-P-K-b-~-Y 


13 
M-V-b-V-6-~-b-M-Y-¥ 


14 
N W M W A R lf N V W 
15 
~~-N-~-B-8-H-~-W-~ 


16 
P Y 0 Y C T 0 P X Y 
17 
~-~-P-6-~Y-P-Q-¥-~ 


18 
R-A-Q-A-E-¥-~-R-6-A 


19 
S B R B F W R S A B 


20 
T C S C G X S T B C 
21 
U D T D H Y T U C D 
22 
V E U E I Z U V D E 
23 
W F V F J A V W E F 
24 
~-G-W-G-K-B-W-~-F-G 


25 
¥-H-~-H-b-6-X-¥-G-H 


26 
6-£-¥-£-M-B-¥-6-H-£ 


Figure 13-6 rj!). Generatrix identification ( ['). 
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Gen. 
ALPHABET 1 
SUM TOTALS 


1 
A-J-~-J-N-E-~-A-£-J 


2 
B-K-A-K-~-F-A-~-J-K 


3 
C L B L P G B C K L 
0 


4 
D M _C f;J Q H C D L M 
0 


5 
ENDNRIDEMN 
7 
6 
FOEOSJEFNO 
7 
7 
GPFPTKFGOP 
2 
8 
H-~-g-~-Y-b-G-H-P-~ 


9 
IR!lRVMHIQR 
5 


10 
J-8-£-8-W-N-£-J-R-8 


11 
K-~-J-~-~-~-J-K-8-~ 


12 
b-Y-K-Y-¥-P-K-b-~-Y 


13 
M-¥-b-¥-~-~-b-M-Y-¥ 


14 
1! W l•1 W A R M N V W 
4 
15 
~-~-H-~-B-8-N-~-W-~ 


16 
P Y 0 Y C T 0 P X Y 
3 
17 
~-~-P-~-B-Y-P-~-¥-~ 


18 
R-A-~-A-E-¥-~-R-~-A 


19 
S B R B F W R S A B 
5 


20 
T C S C G X S T B C 
4 
21 
U D T D H Y T U C D 
2 
22 
V E U E I Z U V U E 
4 
23 
W F V F J A V W E F 
2 
24 
~-G-W-G-K-B-W-~-F-g 


25 
¥-H-~-H-b-G-~-¥-G-H 


26 
~-£-¥-£-M-B-¥-~-H-£ 


Figure 18-7 c% Generatrix identification using arbitrary 
values (U). 


b. The choice of generatrices is now considerably 
lessened by the elimination of the generatrices lined 
through. The choice can now be further reduced bv 
assigning an arbitrary value of ·1 to each of tl;e 
normal high-frequency letters E T N R 0 A I S and 


4> to all others. By summing the values, an indication 
of the correct generatrix is then given. For an example 
of this note, figure 13-7. 


The choice of either generatrix 5 or 6 is ob,·ious. 


The exact determination of which to use is made by 
a comparison of generatrices selected by the snm<· 


process from the other plain component columns. 


1 3-6. (,0 Logarithmic Test for Generatrix Selec- 


tion 
a. A somewhat more precise method of determin- 
ing the correct sequence by measurement may be 
arrived at by using the logarithmic \\·eights of plain 


English reproduced below: 


A B C D E F G H I 
8 4 
7 7 
9 6 
5 7 
8 
J K L M N 0 P Q R S T U V W X Y Z 
1 2 7 6 8 8 6 2 8 8 9 6 5 5 3, 6 0 


b. These values are based on the relative fre- 
quency of each letter in telegraphic text and there- 
fore are especially effective where the generatrix 
contains very few values. The procedure for testing 
the probability of the correct generatrix is essen- 


tially the same as that given in the preceding 
example. A portion of the ciphertext sufficient in 
size to produce recognizable plaintext is decimated 
to form a base composed of the cipher values of one 
period. A column of generatrices is then produced 
by completing the plain component. Each generatrix 
of that column then is tested by summing the total 
values assigned to each of its letters by the vahws 


shown above. The generatrix then showing the highest 
total value is considered the best probability. Upon 


the selction of a generatrix from each plain compo- 
nent column, the letters are juxtaposed at the inter- 
val corresponding to the period to produce plaintext. 


Of course where doubt exists between several 
generatrices they may be played against each other 
to determine the correct one to use. 


c. A modification of this system and the one 
preceding it is to combine the t\\'O tests. The first. 
\\'hich is much quieker, may be used to initially 


select those generatrices \\·hich are easy to identify 


because of their own mnke up of letters. This test 


then eun be used to select one generatrix from those 


previously isolated which would not. be 
rendil~' 


identifiable by the simpler method. 


1 3-7. jr4 Theory of Probable Word Method 


a. The probable word method, similar to that used 


in monoalphabetic substitution, may be used to 
effect a solution where the fore~oing methods are 


of no avail, or where there is an insutfi<'ien<'y of 
external evidence to indicate the number of alphabets 


involved. This method is predicated on the use of a 


plaintext word or words as the cryptographic key 
and may be used when standard or kno\Yll mixed 


alphabets are used. 
b. Essentially the method consists of assuming 


the presence of tt word in the text of the message . 
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The word is then fitted in turn at various positions 
in the message. At each point a plain and cipher 
sequence is juxtaposed to produce the observed 
cipher values. If the probable word is correct and 
is placed in the correct position of the message, the 


key letters produced by the juxtaposed plain and 
cipher sequences will yield a plaintext keyword. To 
demonstrate the theory of the solution, the follow- 


ing short message will be used. 


PGSGG DNRUH VMBGR YOUUC WMSGL VTQDO 


c. Assuming that the word REGIMENT appears 
in the above cipher and that it was produced using 
reversed standard alphabets, it may be set down as 


follows: 
(1) The plaintext is set beneath the ciphertext 
as shown to the right: 


(i) 


PGSGGDNR 
REGI:\lENT 


(2) Using two sliding strips, onP din•ct as the 


plain sequence, the other reversed as tlw cipher 
sequence, they are juxtaposed so as to produce the 


equivalent cipher-plaintext values shown. 


P 
ABCDEFGHI JKLMNOPQRSTUVWXYZ 
C 
GFEDCBAZYXWVUTSRQPONMLKJIH 


(k) 


Thus for the first equivalency the key letter shown 
below is produced: 


C 
PGSGGDNR 
P 
REGIMENT 
K 
G 


(3) The same two strips are now repositioned to 
where Ep=Gc, and the second key lettpr dPrin•d. 
P 
A B C D E F G H I 
J K L 
~~ N 0 P Q R S T U V W X Y Z 


C 
KJIHGFEDCBAZYXWVUTSRQPONML 
C 
PGSGGDNR 
P 
REGIMENT 
K 
G K 


(4) The same process is continued for each 


letter until all the key letters are determined. A 
continuation of the process will result in the following: 


C 
PGSGGDNR 
P 
REGIMENT 
K 
GKYOSHAK 


Obviously the key so produced does not result in ar1 


intelligible word so the assumed word is shifted on•· 


position to the right relative to the text and t h·· 


process repeated. This trial. using tlw ,.;nnw sliding 
strips juxtaposed as appropriate. n•::;ulb in: 


C 
G S G G D X R 
[~ 
P 
R E G I M E 
~ T 
K 
XW110PRE'\ 


(5) Again an intelligible k1•.nnml 
i,.; nnt pro- 
duced; therefore continue to shift thP prohnbll' ,,-on! 


to the right. one lettrr at a time. <'nch tinH' dPriYing 
n possible kt>y. When tlH• point of juxtnpo,.,itinn 
-;lwwn below is reached, a key,,·ord bP,·om<'" ,.,-jd,•n t. 


P G S G G D N R U H V Af B G U Y () W U C W M S G L 1· T (; n 0 


R E G I Yl E 
~ T 
L L B U N K E R 


d. It should be noted that the key is a cyclic 


permutation of BUNKER HILL. Since the kt-oy- 


word or phrase repeats itself during the encipiH·r- 


ment of a message it will appear periodically through- 
out the message determined by the position of the 
probable word in the text. Thus the keyword may 
well" appear as a cyclic permutation, complete or in 
part. 


13-8. <1> Application of the Probable Word 
Method 
a. In actual practice till' application folio\\-,_ ,.;omP- 
1\-hat different lines. Using tlw prPYiou,.; I'X<tmpl<' 
this can be seen in till' following. Fir,.;t t IH· Illl':oisag(' 
is written horizontally on cross-,.;Pction papl'l" and 
the probable word -is written in a ,·olumn. orw ,.;pncP 


below and to the left of the ciphertL•xt ns ,.;IHJ\1 n in 


figure 13-8. 
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PGSGGDNRUHVUBGRYOUUCWNGGLVTQDO 


R 
X 
X 
X 


E 
X 
X 
X 


G 
X 
X 
X 


X 
X 
X 


r.1 
X 
X 
X 


E 
X 
X 
X 


u 
X 
X 
X 
I 


X 
I 


X 
I 
!X I 
I 
L __ l __ 
T 


Figure 13-8 rf). Location of probable word ( U). 


b. If the probable word assumed does exist in 
the message it may be located beginning at any one 
of the positions indicated by an x in the matrix 
above. Rp being the equivalent of the cipher value 
appears in the text directly above that point. 
Moreover, the remaining letters of the probable 
word are represented by the cipher letter to the right of 
that point. Thus if the key is a plaintext word or a 
phrase it will appear long the diagonal line, as this 
diagonal represents the successive encipherment of 
the probable word. The possible cyclic permutations 
of the keyword can be noted in the diagonal arrange- 
ment of the x's. 
c. Again two alphabetic strips, one direct, and 
one reversed, to correspond with the . previous 
assumption that a reversed standard alphabet is 


involved, are used. However, since we have assumed 
that a plaintext word or phrase is being used as a 
keyword, it is not necessary to derive the key lettN 


of each juxtaposition. Only the amount needed to 
prove the unacceptability of the relative location of 
the probable word to a position in the ciphertext is 


required. This being predicated on the proposition 
that an incorrect position and the consequent derinl- 


tio~ of key letters will produce impossible combina- 
tions of letters for a keyword. With this in mind. 
the strip may be juxtaposed and the keys shown in 
figure 13-9 below derived. 


P G S G G D N R U H V M B G R Y 0 U U C W M S G L V T Q D 0 


R 
c[xiJ x xtu E I L y M D S X I p F L L T II D J 
I 
' 


E 
[Kiw K KIH R V '! L z Q F K v c s y y G A Q W K 
I , 


G 
l !Y]M M;JiT 


' 
I 
X A N B S H M X E U A A I C s y H R 


I I 
I ! 
I 
' 
i I 
i 
i I 
I 
i I 
I 
r~ 


I 
I 
' 
I 
I 
I 
I ' I 
I 
i 
E 


I 
I 
I 
I 
I 
N 


T lll 
I 
I 
I I 


Figure 13-9 <f> . Key derivation ( U) . 


d. Examination of the trigraphs occurring along 
the diagonal, produced by successive juxtaposition 
of the two sequences, reveals several which may 


represent a portion of a keyword. For example, note 
the trigraphs EVA, LLB, XVE, ICU, PSA, L YI, and 
TAS which appear on the basis of vowel-consonant 
combinations to represent part of a possible keyword. 


However, it is also important to remember that 
seemingly improbable combinations, due to cyrlie 


permutation, may well be the true keyword as in the 
case of the trigraph LLB appearing under UC above. 


At this point the analyst needs only to complete 


those diagonals \•..-hich show possibilities of containing 
a keyword, again finding the same keyword. This is 


illustrated in figure 13-10. 


PGSGGDNRUHVU8GRYOUUCW!1SCLVT~~O 


R 
G X I J X X u E I L y M D s I X I I p IF I L i L I T! :i ! c I J : 
; 


E 
iK[w K K H R V Y L Z Q[F!Kjv c[slyiy[r.iA!Qiw:Ki 
! 


1 


1 
ly, HjM J T xJAIN B s H/~!1X E/uiA'Ai r cis Y :: P ---- 
G 


1 
I I 
p 
u I I : I ]., I c' c: 
E 
A 


I 
I 
I i 
l 
! 
I 
I 
' 


M 
I 
I 
I ' I ' 
' 
' I I I I 
' IH 
INi 
i 
: 0! 
i 
,s' 


E 
! i 
' \Ki 
i 
: 
t 
: 
J 


I 
I 


I 
i 
i 
' I I I 
I 
I 
I 
I 
IE 
i i I • ! I 
I 
I 
: 


! 
I 
I 
I ! 
I 
I I 
I [I 
I I 
: 
! 
l 
I 
R i I I 
! 
! 
i 
I 
I 
i 


N 


T 


Figure 13-10 1'>.· Key derivation, step 2 ([:)I 


e. Once the keyword has been found. solution is a 
,.;imple matter, for the process of determining the 


keyword has. of itself proved the assumption concern- 
in;r the structure of the alphabet used. In t hi,; cu,.;e a 
matrix is constructed containing one ,;tandnrd 


alphabet as the plain component and ,;e\·en re\·er,;ed 
,;tandard alphabets as the cipher sequence juxta- 


posed to form the key\\·ord BUXKER HILL belO\\. 


A of the plain. With this, the ciphertext can be 
deciphered to read: 


"~lOVE YOUR REGIMENT TO RJ FIVE 
TWO SIX." 


f In the foregoing a whole eryptogrnm \\·as used 


for P:<ample purposes. However, the technique may 
hP applied to a portion of a longer cryptogram. In 


this case only a few prerequisites art' rrq uired. First. 


a rPasonably accurate probable word. then an idea 
of where this word is located in the mps,;age. Then. 
by trial and error as shown above, thr keyword can 
lw derived. Further, although the examp!t' nbov!' 
usrd a reversed standard cipher sequence. tlw nwthod 


is equally applicable to cases where a direct stundnrd 
sequence is used, and also when a mixed seq uencc is 
used, if it is a known sequence, and the repenting 


key begins under Ap. 
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Section II. (,e) SYSTEMS USING MIXED CIPHER ALPHABETS 


13-9. ()2f Characteristics of Mixed Alphabets 
a. Polyalphabetic 
system~S \\·hich use standard 
alphabets as cipher and plain sequences, because of 
their inherent simplicity, are not widely used. The 
reason for their vulnerability to analysis is threefold. 
First, only relatively few alphabets are normally 
used. Second, in this type system they are used 
periodically, imparting the cyclic phenomena in the 
text which in turn provides the means of determining 
the number of alphabets involved. Third, the alpha- 
bets used are known alphabets, i.e. the relative 
sequence of their individual letters are known. This 
with a limited number of alphabets g-reatly simplifies 
the process of equating cipher and plaintext values. 
b. In preceding paragraphs, when monoalphabetic 
substitution using mixed alphabets was discussed, it 
was pointed out that the use of mixed alphabets 
greatly increased the difficulty of solution. So it also 
is in the case of polyalphabetic substitution. How- 


ever, there are certain characteristics in the type 
mixed alphabets used which permits a fairly easy 
solution. 
c. In paragraph 12-4 the common configurations 
of primary components, and of the derived secondary 
alphabets, used as cipher alphabets were given. In 


. the preceding section, case r was used and the 
analysis based .on the characteristics of those sec- 
ondary alphabets produced . in that case. In this 
section, alphabets of case II will be treated and their 
characteristics exploited as the basis for analysis. 
d. Alphabets of case II are those whose primary 
components are not both normal sequences. That is, 
the plain component may be a standard alphabet 
and the cipher component a mixed sequence; or the 
plain component may be a mixed alphabet and the 
cipher component a norm11.l alphabet. In either case 
the resulting secondary alphabets are mixed alpha- 
bets. An example of the former configuration may be 
seen below in figure 13-11. 


p 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Cl 
B C D F G I JK MP QS U X y z L E A V N W 0 R T HI 


C2 
L E A V N W OR T H B C D F G I J K MP Q s U X y z 


C3 
U X y z L E A V N W 0 R T H B C DF G I J K MP Q s 


c4 
EA VN w 0 R T H B C D F G IJ K M p Q s u X y Z L 


Figure 13-11 rt}. Case II secondary alphabets (U). 


1 3-1 0. (J4 Direct Symmetry of Position 
a. The secondary alphabets above were produced 
by a· juxtaposition of two alphabets. A standard 
sequence as the plain component and 4 of a possible 


26 positional juxtapositions of a kP.nn)f([ mixed 


alphabet based on the keyword LEAVE::\vYORTH. 


The four shown, as well as tht> othPr 22 possible 
are in reality only one seqtwnec, t-ach bPing displaced 


relative to the plain component. Thus in <'ach u 


direct symmetry rxists, i.e. in each seq ucncr• the 
individual letters follow orw anot hPI' in a fixPd 


order at a fixed distance. Since eaf'h cipher ,.;eqnen('e 


i~S offset a predetermined distnnf'e fwm the index 


letter of the plain component, ,.;ymmetry exish 
between the individual letters of each ,.;eqnence. 


b. The implication of this direct symmetry of 


po~Sition can be shown in the example bel<)\\-. Let H,.; 


first assume that in the conrse of nnnly,.;j,.; of a poly- 
alphabetie cipher that we han determined that a 


period of four is being nsed, that the cipher ,.;eqnenl·e 
used i::> mixed, and fmther that the follo\\·ing ndne:-; 
have been recovered. 


AI.PHABET 


Ep=Gc 
Op=Yc 
Tp=l-c 


ALPHABET 2 
Ep=Nc 
Op= Gc 
Tp= Pc 


ALPHABET 3 
Ep=Lc 
Op=Bc 
Tp= /c 
ALPHABET 4 
Ep= We 
Op=lc 
Tp= (Jc 


The equivalencies sho\nl for the seeondnr.'· alphabets 


can be set down in a matrix recon,.;trul'tinn diagram 


as shown in figure 13-12. 


P 
A B C D E F G H I J K L M N 0 P Q P S ~ U V ~ X Y Z 


Cl 


C2 


C3 


C4 


G 


N 


L 


w 


y 


G 


B 


I 
I 


I I 
I v' 
i 1 I 


' 
' 
' 
, i ; I 
[ I ,P: 
I I lit 


! 
i 
, I 
: 
I 
I 
j 
, ,i 
i l 
I 
I I I I": 
, 
I 
I I I 
' ' 


Figure IJ-12 ~Letter placement, direct symmfir:1 of position 
(U). 


c. As the individual letters of a mixed ..;equence 


follow one another in n. fixed order n nd n,.; each 
secondary alphabet is the same in re,.;pet'l to the 
sequence of their letters, only positioned at different 
points, it follows then that the letters <lf "ne l'an be 
transferred to another on the bnsi,.; of l'nnstant 


distance and sequence. For example. in l'ipher 


sequence 1 nbo~·c, Gc, Yc, and ·vc nre nott•d in"''<[ ltl'lll'l' 


at 10 and 5 letters distance respecti,·ely. Thi,.; same 


sequence then can be transferred to cipher ,.;equence 2 
where a Gc also appears. By counting 10 ,.;pnf'es to 
the right of Gc, l"c can be inserted bel()\,. Yp. Con- 


tinuing the count around the alphabet, \ -c nw be 


OAIEIC"InC'IEI'T'I AI 
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located below Dp. For example, note the placement 
of the .values in figure 13-13. 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cl 
G 
y 
v 


C2 
V N 
G 
p 
y 


C3 
L 
B 
I 


c4 
w 
I 
Q 


i 


Figure 13-13 (/lf. Placement transfer, direct Bymmetry of poBi- 
tion (U). 


d. By continuing the process of the reconstruction 
of the secondary alphabets through the principle of 
direct symmetry of position, the following additional 
placements can be made as shown in figure 13-14. 
Note that two elements must be known. First and 
foremost, one of the components, the cipher or the 
plain, must. be a known sequence. It is unimportant 
whether it is mixed or standard, only the the exact 
sequential progression of the letters be known. If 
either is unknown, direct symmetry even if present, 
cannot be detected. Secondarily, given one known 
sequence where the other is unknown, only a few 
equivalencies are required to use the principle of 
direct symmetry. 


P 
ABCOEFGHIJKLMNOPQRSTUVWXYZ 


Cl 


C2 


C3 


c4 


G 
p 
y 
VN 


VN 
G 
p 


L 
w 
B 
I 


w 
B 
I 
Q 


Figure 13-14 (/ifJ. Placement transfer (U). 


y 


Q 


L 


e. The importance of direct symmetry of position 
in the analysis of a cryptogram should be obvious. 
The new values for each cipher alphabet discovered 
by the process can of course be inserted in the 
ciphertext, thereby leading to the recovery of further 
cipher to plain equivalents. This in turn enables the 
analyst to further develop his matrix reconstruction 
diagram. In short, it has a snowballing effect, each 
step leading to additional recovery until a final 
solution is reached. 


1 3-11. (r;f Preliminary Steps 
a. In the solution of polyalphabetic ciphers using 
mixed alphabets, the same general preliminary 
techniques as those previously given are followed 
prior to the exploitation of the characteristic of 
direct symmetry. Assuming that a cryptogram has 
been id.entified tentatively as polyalphabetic, it is 
laid out and repeats are underlined as in figure 
13-15. 


5 
10 
15 
20 
25 


A 
QWBRI V'IYCA ISPJL RBZEY QWYEU 


n 
L W M G 'i.___l_£ J C I 
U T Z E I 
!! I B K .'1 
Q W B R I 


c 
V W Y I G B W N l3 Q Q C G Q H IWJKA 
C E G X II 


D 
IDMRU Vt:ZYG Q I G V ti 
C T G Y C 
!3 P DB L 


E 
V C G X G B K Z Z G 
I V X C U il T Z A 0 
B W FE Q 


F 
Q L F C 0 
f.! 1' Y Z T 
C C B Y Q 
0 P f K h. 
CUGI·J 


G 
VPWMR 
Q I IE W I C G X G 
13 L C Q Q VB G R S 


H 
f.IYJJY Q V F W Y 
R W ,V F L CXNFW /.' c J f: ,{ 


J 
I D DR U 0 p J Q Q 
Z R H C N 
vf:uy~c;cc 


K 
B X D B ,1 
P X F P U Y X .il F C :1 P J E L 
S li !I C D 


L 
S E Z Z G I B E Y U 
K D li C A 
1: B J J F 
K I L C J 


tl 
f.,'FDZT CTJRD f.! I Y Z Q 
A C J P R 
5 5 c z " 


II 
Q Y A H Q 
V ED C Q LXiiCL L V V C S (hi3!I 


p 
I V J R N 
W 1i B R I 
V' P e.r E L 
7' ,; G C 
! !: J 
~ p 


Q 
A 1' YEW 
C B Y Z T 
E V J 
~~ 0 
V P Y H L 
L ;=: " " 
.,_ 


R 
X IN B A 
I K W J ~ 
Z F Y 
.--< W' F Z .._, 
G ;.,.· F 
e.-~ 
·~ 


s 
Q w J y Q IBWP.X 


Figure 13-15 Cf'>· Ciphertext prepared for analysis (F). 


b . . Once the repeated groups of letters arP under- 
lined, they are extracted, set ih columnar form. the 
intervals noted, and the factors derived. ::\otl' that, 
in figure 13-16 only the factors to 26 arP ineluded. 
Beyond that, additional factors would b0 merely 
repeated cycles of the basic 26 possible alphabPts. 


POLYGRAPH 
I:!TERVAL 
FAC'l'ORS 


QWBRIVWY 
45 
3, .2_, 9, 15 
CGXGB 
60 
2, 3, 4, 5, 6, 10, ~~. :.s, 20 
PJEL 
95 
.2_, 19 


ZZGI 
145 
5 
BRIV 
330 
2, 3, .2_, 6, 10, 12.., 
::.~' 


BRIV 
285 
3' .2.' 15 ' 19 


KAG 
75 
3, .2_, 15,25 
QRD 
165 
3, .2_, 15 
QWB 
45 
3' .2_, 9' 15 
QWB 
275 
5' 11, 25 
WIG 
130 
2, .2_, 10, 13, 26 


XNF 
45 
3, .2_, 9, 15 


YZT 
225 
3, .2_, 15, 25 


ZTC 
145 
.2. 


Figure 13-16 </). Determination of period 1 [ · l 


The constant factor of five is indicati\·p t lt:tt all 


repeated appearances are probably causal rnt h•·r than 


accidental. Further, their number and ,.;jz,• n·inforces 


this assumption. Therefore it may be accPptt•d that 
the period, i.e. the number of alphab<'b, j, fiH. 


c. Having determined a probable pNiod lt'll?rt h the 
next·step is to make a distribution of the ciphertext, 
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one for each period in order to ascertain the type of 
alphabet involved, see figure 13-17. 


~ 
~ 
i 
= 
:= 
=~ 
-=~ 
~=- 
~ 
~~~DiF~~IJ~~~i~i~~~~u~ii~i 


Figure 13-17 (U). Uniliteralfrequency distribution 
alphabet 1 ( U). 


In this case the distribution of alphabet 1 is indicative 
that the period of five is a correct assumption. If 
further confirmation is required, a similar distribution 
for each alphabet could be made and the statistical 
tests previously explained could be used as confirma- 
tion. This is the accepted procedure in most cases . 
However, accepting the assumed period, the distri- 
bution is compared to the normal. In this comparison, 
two facts should immediately become apparent. 
First, the pronounced peaks and troughs arc indica- 
tive of monoalphabetic substitution, as it should be, 
assuming the period to be correct. Yet the spatial 
relationship between the peaks and troughs does not 
conform to the normal. That is, it cannot be fitted 
to the normal. Thus, the use of mixed sequences is 
indicated. 
d. If the distribution cannot be fitted to the 
normal, recovery of each value in each alphabet then 
must be determined on an individual basis. Later, as 
values are inserted in the text, additional values may 
be assumed on word patterns, probable words, etc. 
This individual identification may be accomplished 
through a study of frequencies of occurrence, a study 
of a triliteral frequency distribution, or even a study 
of repetitions and assumptions based 
thereon. 
However, for reasons previously explained, it is best 
to consider all factors. Accordingly, it then becomes 


Alphabet 1 


A 
B c 
D 
E 
F 
G 
H 
I 
J 
K 
L 
!v1 


necessary to develop a trilitcral frequency distri- 
bution. 
e. A triliteral frequency distribution made of a 
polygraphic cipher mnst hn somewhat different than 
that made previou,,[y in 'he t·ase of monoalphabetic 
substitution systems. It must show each letter prefix 


and suffix, and yet account for the fact that there 


are a number of diffen•nt alphabets involved. In 


order to do this, one Jistribution must bo made for 
each cipher alphabet. In this case, since the period 
length conforms to group size, each succpssivf' lf'ttf'r 


of each group is listed in its O\\·n distribution, the 
letter preceding and following it is listed below in 
columnar form as a diagraph. Thus a frequency 
distribution for each alphabet and a triliteral distri- 
bution involving three different alphabets is com- 
bined. In the example shown belo\Y note that the 
horizontal line A-Z represents those letters from the 
first alphabet. The prefix and suffix listed bPiow c-ach 


letter represents letters of the 5th and 2nd alphabpts. 


Thus for reference purpose QAC, tlw first trigraph of 
alphabet 1, may be annotated 512, as may all 
QAC 


trigraphs from that distribution. In like manner thP 


following patterns apply. 
Alphabet 2 


Alphabet 3 


Alphabet 4 


Alphabet 5 


1 2 3 
SAN 
2 3 4 


YAH 


3 4 5 


ZAO 


4 5 1 


CAl 


Note that the annotated numbers are merely a cyclic 


permutation of the periodic sequence 1-2-3-4-5. 


Thus the completed triliteral distribution \vould 


appear as shown in figures 13-18(D through 13-18@. 


N 
0 
p 
Q 
R s 
T u v w X 
y 
z 


QC GW NT 
TV 
AE 
AS 
UD UW IT UT QP NX -~! LB LA LA 
IW NN QI UX QR 
PT OP TC 
AD 
we 
FI QX II 
UP 
YW YW DE 
IW 
GK TT 
LX 
HW 
FW LV OT 
NW QD RB 
VE 
OW WB 
LW 
ND 
LR SY 
QC QD 
LC 
GL 
GV 
we 
GI 
GP 
GX 
we 
GP 
QL 
QB 
XD 
AB 
RI 
NW 
GB 
JF 
YV 
QE 


IV 
DI 
NY 
IP 
NR 
sw 
[jp 
AK 
QW 
QB 


Figure 13-18® cf'>· Triliteralfrequency di8lribution, alphabet 1 (U). 


"CONFIDENTIAL 
13-11 


t:n N r:"l ni=NTIAI 


Alphabet 2 


A B C D E F G H I 
J 
K 
L 
M N 
0 
p 
Q R S T U V W X Y Z 


SN RZ IJ IM GG MD 
TG VG QG GG VZ 


.IE VG ID SZ 


MJ CB RG VD 
SG IG Kll 


CY MJ RZ 


IW AJ 


MB 
QG 
QI 
KL 


MY 
XN 


IW QF 
WB 


BZ BG 
BD 


OD 


vw 


OJ 


MJ 


VJ 
VY 


ZH IP MZ 


IG 
CG 
LZ 
NZ 
MY 
CJ 
AY 


Figure 13-18@ sm· Triliteralfrequency distribution, alphabet 2 (U). 


A B 


YH WR 
IK 
WR 


CY 


WI 
NR 


C D E F 
G H I 
J 
PB BY WE CQ RC IE CC 
PK 
LC EX DC 
WK. 
DR 
VW IV 
YJ 
WY 
XP TY 
CK 


XB 
WZ CX 
PQ 
FZ 
WJ DI 
PE 
EC 
CX 
PJ 


LQ 
TR 
BR 
CR 


DD 
VR 
BZ 
PE 


AD 
WY 


RQ 


VQ 


Alphabet 3 


K 
L 
M N 


IC WG WB 
DR WF 
XF 
XF 


AC 
XC 


IB 


0 P Q R S T 


SJ 


Figure 13-18@ C/>· Triliteralfrequency distribution, alphabet 3 (U). 


Alphabet 4 


A B C D E F 
G H I 
J 
K L M U 
ZO NQ YA GG ZY NL MW AQ YG PL BN 
WR ZQ 


DL JI GN YU NW 
XL GG JY JA 


Dll XU 
ZI NG 
BI JF DA 


NA FO 
FQ 
WQ JX 
HN 
IW 
FQ 
ND 
JL 
HA 
JL 


LJ 
YW 


DQ 
NL 
vs 


o P Q n s T 


FU GH BI 
GQ BI 
JQ MU 
GP GS 
GU DU 


JD 
JR 
JN 
BI 
wx 


Figure 13-18(]) <jlf. Triliteralfrequency distribution, alphabet 4 (U). 
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IX QB GN MJ 
QF VY BD QA 


LV QY PF 


IJ l11 YN 


EG QB LN 


VY 


BN 
IJ 
BF 
RN 


VD 


QB 


Y.F 


GF 
QJ 


U V W X Y Z 


WV PM VC WC BE 


KJ 
WE TE 
BR 
WI EY 
TZ KZ 
IZ TA 
TE EZ 
BZ RN 


PH DY 


U V W X Y Z 
GN FY GlJ ZG ZG 


GG GO YT 


GG BQ ZG 


DQ DT 


EU YQ 
ZF GN 


JQ YT 


FL 
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Alphabet 5 


A 
B c 
D 
E 
F 
G 
H 
I 
J 
K 
L 
H 
N 
0 
p 
Q R s 
T u v w X 
y 
z 


CI 
cs 
JK IB QI RV CM 
JR 
KQ YB QA BQ MQ RJ.1 ZC EL 
GI KI EQ 
KG 
RM 
YK YQ 
CM 
BV 
XI AB 
EQ RS CQ ZC RV 
EI R- JQ 
KG 
XB 
EM 
FG 
VC CN 
YO 
ZE CN 
FM 
WR 


CM 
ZI 
RV 
ES 
cv 
QV 
RO 
EC 


BI 
IV 
II 
CL 
BP 
QZ 
PY 


XB 
RV 
ET 
ZQ 
YR 
YK 
DB 
HL 
RW 
ZA 
QV 


FN 
ZG 
DI 
HV 


ZI 
CL 


NX 
JR 
JQ 
YI 


Figure 13-18(§) <4. Triliteral frequency distribution, alphabet 5 (U). 


f. In addition to the triliteral frequency distribu- 
tion a condensed table of repetitions is prepared in 
. which all polygraphs are listed and the alphabet of 
each letter is indicated. A format of this is shown in 
figure 13-19. 


1 2 3 4 5 1 2 3 
Q W B R I V W Y-2 


QWB 
Q w 


VP 
v w 


3 4 5 1 
B R I V-3 
Z Z G I-2 


Y Z T 
B R 
G Q 
G X 


.r R 


il F 
y z 


4 5 1 
K A G-2 


Z T C-2 
R I 
-3 


y Q -3 
z 1.' 
-3 


-2 
-3 
-4 
-3 
-3 
-3 
-3 


-3 
-5 
-3 
-3 


2 3 4 5 1 


C G X G B-2 
p J £' L -2 


XilF 
-2 


C G 
-3 
c J 
-3 
PJ 
-3 


~~ B 
-3 
WF 
-3 
w y 
-3 
X il 
-3 


5 1 2 
Q R D-2 
W I C-2 
GB -4 
I V -3 
Q Q -3 


Figure 13-19 <¥>. Condensed table of repetitions (U). 


13-12. c.c.r ldentiAcation of Cipher Values 


a. With the completion of the preliminary step . 
the analysis of the cryptogram may no,,- 
begin. 


Using the same analytic techniques as were used in 


the case of mixed monoalphabetic ciphers, onp now 


attempts to establish the identification of cipher 


values, doing this for each alphabet. The first step 
is to separate the vowels from the consonants- 
through frequency of occurrence alone, or by the 
consonant line method in doubtful cases. On the 
2 
5 
- 
- 
basis of the former it appears that lFc and Qc are 
the equivalents of Ep. In the other alphabets this 
distinction is not so clear-cut. Using the same 
1 
3 
4 
- 
- 
- 
yardstick of frequency as a measure Ic, Gc, and Cc 


appear as likely candidates for Ep. 
b. In paragraph 13-lle it was stated that the 
triliteral distribution of alphabet 1 represents the 
letters of alphabets 512 as prefix, base, and suffix 
letters respectively. As the cipher value of Ep has 
been assumed with some certainty for alphabets 2 
2 
5 
- 
- 
and 5 (We and Qc), we may use this to determine 
the vowels and consonants of alphabet 1. The basis 
for the identification being the familiar diagraph 
permutations of E, that is: 


E as beginning letter E D EN E R E S 
1 
E as ending letter 
N E R E S E T E V E 
1 


....... ~ANI='Ini="NTIAI 
-- 
13-13 


,.." ................ .__._. 


- vU 
I~ rTIJ'I;;.I ... rJ]Iii[~ 


In terms of the 512 pattern, possible cipher to plain 
equivalencies may be set down as illustrated in 
figure 13-20. 


51 
51 
51 
51 


B2.P 
ENp 
~ ESp 


Q-a 
Q-a 
Q-a 
Q-a 


12 
12 
12 
12 
12 
NEp 
REp 
SCp 
TEp 
VEp 


-Wa 
-Wa 
-Wa 
-Wa 
-Wa 


Figure 13-20 ~- Identification of cipher to plain 
equivalencies ( U). 


Thus it can be seen that some of the high frequency 
letters of alphabet 1; I, A1, Q, V, B, G, L, R, S, and 


0 respectively, probably represent the plaintext 
consonants D, N, R, S, T, imd V. Moreover if the 
consonants can be identified, then the remaining 
high.:frequency cipher letters of alphabet 1 most 
likely will be limited to vowels. 
2 
5 
- 
- 
c. The prefixes of We and the suffix of Qc (both 
assumed Ep) are shown in the followjng tabulation 
figure 13-21, drawn from the triliteral distribution 
of alphabet 1. 


2 
Prefixes of Wa 
QGKVRBILC 
"i.--=---- 


.2. 
Suffixes of Qa 
IQRXLVAZO 


Figure 13-21 r· Identification of vowels and consonants (U). 


Using the data established, it is now possible to study 
the high-frequency letters, I, M, Q, V, B, G, L, R, S, 


and C of alphabet 1 in turn, to determine their 
identity as either a vowel or consonant, and perhaps 
ascertain their exact plaintext value. 
1 
- 


(1) Ic previously established as a possible cipher 
value for Ep may be set aside immediately. 
2 
(2) Me is noted as not appearing either as a 
suffix or prefix in the tables above which indicates 
that it may be a vowel. Moreover its frequency tends 
credence to this. If it is a vowel, it may well be Op, 


as Ep has been excluded, though its identification as 
either an Ip or Ap cannot yet be discounted. 


1 
2 
(3) Qc is observed five times as a prefix of n·c 


5 
and three times as a suffix of Qc. The frequency of its 
combination with assumed Ep indicates both that it 
is probably a consonant and that it is the equivalent 
of Rp. 
1 
(4) The letter Vc occurs three times as a prefix 
and twice as a suffix indicating that it, too, is prob- 
ably a consonant. On the basis of its frequency it then 
may be assigned the plaintext value of T. 


1 
2 
- 
- 
(5) The letter Be occurs only as a prefix of We. 
-then only twice. As its frequency is neither 10\v nor 
high, it may be a consonant. 
1 - 
(6) Gc appears but once, as a prefix; its identity 


is questionable, though it may be either Ap or Ip. 
1 - 
(7) Lc appears one time as both u prefix and a 


suffix, therefore it is probably a consonant, yet its 


exact identity cannot be ascertained. 
1 - 
(8) Rc, because it appears once as a prefix and 
twice as a suffix of the assumed Ep, is most certainly 
a consonant . 
1 
1 
- 
- 
(9) Neither Sc nor Cc appears as a suffix or u 


prefix; therefore, both may be vowels or consonants, 
though a study of their combinations later, in other 


1 
1 
- 
- 
sequences, shows that Cc may be u vowel leaving Sc 


unclassified. 
d. The same process is applied to each distribution 
in turn classifying the cipher letters Pither us \'<)\\'(+; 


or consonants, and identifying specific plain to cipher 


values where possible. Also, as the process is con- 
tinued, it then becomes possiblf:' to expand the 


classification and identification by playing one 
assumed value of one alphabet against an unidentified 
vowel or consonant in another, thus leading to 
additional identifications. The completed process 


could result in the following classification of ,-owe b 


and consonants. Also previous idPntifications could 
be placed in a reconstruction matrix as sho\Yll in 
figure 13-22. 


13-14 
l"tAN I="IAI="NTI41 


GONFIOI!:N'"RA-L- 


Alphabet 


1 


Vowel• 


I, M, C 


W, P, I 


Consonants 


Q, V, B, L, R, G? 


B,C,D,T 


p 


Cl 


C2 


C3 


c4 


C5 


2 
3 
4 
5 


G, Z 


C; E?, R?, B? 


Q,U 


J, N, D, Y, F 


Y, Z, J, Q 
G, N, A, I, W, L, T 


ABC DEFGH I JKLMNOPQRSTUVW XY <:: 


c 
I 
M 
Q 
v 


w 


G 
c 


Q 


Figure 13-22 r.e). Reconstruction matrix (U). 


1 3-1 3. (fZf Application of the Principle of Direct 
Symmetry of Position 
a. At first glance the values recovered to this point 
seem somewhat sketchy. However, on a closer 
examination the appearance of Qc in both alphabets 
1 and 5 is noted as well as the Cc in alphabets 1 and 4. 
If the cipher system involves the use of one mixed 


component juxtaposed a number of times against a 
known standard sequence, the resultant secondary 
alphabets (cipher alphabets) can be recovered by 
applying the principle of direct symmetry of position 
presented above. If this is the case then the values of 
alphabet 1 can be transferred to alphabet 5 using the 


5 
Qc as point of reference. It would appear as shown in 
figure 13-23. 


P 
A B C D E F G H I 
J K L M N 0 P Q R S T U V W X Y Z 


:: I "f.fll:!!,fl"lllllc,l·lll;ll'llc,llll. 


Figure 13-23 (C). Recovered value transfer (U). 


b. This process immediately reveals three addi- 
5 
5 
5 
tiona! values; Mc=Bp, Vc= Gp, and lc= Rp. Note 
that Bp and Gp are normally low-frequency letters. 
If the values derived by this process are correct, 
Me and Vc of alphabet 5 should appear infrequently. 


A check of alphabet 5's distribution reveals that 
neither appear, which tends to support the ussump- 
5 
tion. Note that Cc in alphabet 5 appears under N p 


and Vp. Both are consonants, but are significantly 
5 
different in that if Cc=Np, H can be expected to 


5 
appear quite frequently. If on the other hand Cc is 


Vp it will appear infrequently. Examining the dis- 
tribution for alphabet 5, it does not appear at all, 


therefore it must be equivalent of Vp rather than 
5 
Np. The definite placement of Cc now permits the 
placement of values in alphabet 4. The total nllues 
now consolidated in the reconstruction matrix appear 


in figure 13-24. · 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cl 


C2 


C3 


c4 


C5 


I I I I I 
I I I I I I I I I 
I I I 


I 
c 
M 
Q 
v 
I 
w 


G 


I 
c 
M 
Q 
v 


M 
Q 
v 
I 
c 
I 


Figure 13-24 Cjl5. Additional value placement (U). 


c. At this point it is possible to transfer the n1lues 


found to the cryptogram. It is possible to continue 
along the same lines, i.e. determining the value of 
individual cipher letters through association with 
those already found, confirmed by their use in other 
alphabets. However, with the number of values 
already recovered it may be more profitable to 
approach the problem directly through the anal.vsis 


of \vord patterns in the ciphertext. 


13-14. ~Reconstruction of the Matrix 
a. Using the partially recovered matrix, the fol- 
lowing plaintext values can be inserted in the cipher 
work sheet (fig. 13-25). 


~nNJ:"InP"NTI4L 
13-15 


468·095 0 ·1Z ·13 


CONF"IDENTIAL .. 


5 
10 


A- 
QWBRI 
VWYCA 


RE 
R 
TE E 
B 
LWM~w 
ICJCI 


E 
E 
ER 


C 
VWYIG 
BWNBQ 
TEA 
E 
E 
D 
IDMRU 
VEZYG 


E 
T 
E 
VCGXG 
BKZZG 


T E 


15 


ISPJL 
E 


MTZEI 
0 
R 
QCGQH 
R EN 
QIGVN 


REP 


IVXCU 


E E 


MTYZT 
CCBYQ 
0 
I 
I 
E 


20 
25 


RBZEY 
QWYEU 


RE 
MIBKIJ 
QWBRI 


0 
RE 
R 
IWJKA 
GEGXN 


EE 
E 


CTGYO 
BPDBL 
I E 


NTZAO 
BWFEQ 
E E 


OPDKA 
GDGIG 
EA 
F 
QLFCO 


R E 
G 
VPWMR 
QIIEW 
ICGXG 
BLGQQ 
VBGRS 


T E 


UCJKX 
0 


T 
K 
R 
EE 
EHE 


H 
MYJJY 
QVFWY 
RWNFL 
GXNFW 


0 


J 
IDDRU 


E 
K 
BXDBN 


R 
E 


OPJQQ 
ZRHCN 


NE 
E 


PXFPU 
YXNFG 


L 
SEZZG 
IBEYU 
KDHCA 
E 
E 


M 
MFDZT 
CTJRD 
MIYZQ 
0 
I 
0 
E 


N 
QYAHQ 
VEDCQ 
LXNCL 


D 
E 
T EE 
E 


P 
. IVJRN 
WNBRI 
VPJEL 
E 
R 
T 
Q 
ATYEW 
CBYZT 
EVGQU 


R 
XINBA 


S 
QWJYQ 


RE 
E 


I 
EN 
IKWJQ 
RDZFY 


E 
E 
IBWRX 
E 


VWDYQ 
RDGDG 
TE 
E 
E 


MPJEL 
SANCD 
0 
E 


MBJJY 
KILCJ 


0 
E 
ACJRR 
SBGZN 


LVVCS 


E 
TAGDN 
E 


VPYHL 


T 


KWFZL 


E 


E 
QWBII 
REAR 
IRGQP 
E E;U 
LRZNQ 


E 
GWFJQ 
E E 


Figure 18-25 rf>· Partially recovered plaintext (U). 


b. Possible words are somewhat sketchy, but no 
impossible combinations are noted. Therefore the 
plaintext values would be carefully scanned in an 
attempt to locate possible words. In line A, a ,,·ord 


fragment is at once noted. 


A 
5 
10 


QWBRI VWYOA 
RE--R TE-E 


15 
ISPJL 


E 


(1) The same pattern occurs on line B as: 


1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 
B 
Q W B R I V WY I G B WN B Q 


RE--R TE-A 
E 
E 


Considering possible words which may be used as 


the beginning of a message, the word REPORT is 


quickly selected. Note that the E which follows it 
may be expanded to REPORTED. Tll\ls the follo\\·- 


ing cipher to plain value may be assumed. 
3 - 
=Pp 
Be 
4 - =Op 
Rc 
3 - =Dp 
Yc 


(2) A similar pattern is noted on line L 


5 
1 2 3 4 5 
1 


S 
QWB I I 
I 
RE ARE 


3 
Having established the values of Be as Pp it leads 
immediately to the assumption that this plaintext 


5 
fragment represents PREPARE and that Sc= Pp. 


(3) Another pattern of interest occurs on lines 


E and F. Note the word fragment: 


1 2 3 4 5 


ODGIG 


EA 


1 2 3 4 5 
V PWA!R 


T 
K 


This may represent the word ATTACK, and if so 
the following values could be assumed: 


5 


Gc=Tp 


2 


Pc=Ap 


3 


Wc=Cp 


5 
The assumption that Gc=Tp is confirmed at the 
second appearance of REPORTED. Xote that this 


value completes the phrase REPORTED AT. 


(4) Reexamining the text in light of the pre- 


vious assumptions, additional \'alues mny be gleaned. 
For example, beginning at A9 another possible word 


is noted. 
1 0 


A1 
4 5 


OA 


E 


1 5 
1 2 3 4 5 
ISPJL 


E 


With a little imagination the ,,·ord EXE::\[Y can be 


seen in the similarity of the placement of the E. 


13-16 
CONFIO~NTIAL 


~AidiPIF'\I:'U?IAI - 


Further, it seems to make sense in that the phrase 
REPORTED ENEMY would appear at the opening 
of the message. If the assumption is correct then: 
5 
2 
3 
- 
=Np, - =Mp 
- 
=Yp 
Ac 
Sc 
and Pc 


c. The process outlined can be CQntinued, as long 
as probable words can be seen in the text. However 
there is danger in this unless the assumptions are 
checked periodically for validity against other factors. 
In this case, the assumed values shown below can be 
compared to their respective frequency distributions. 
If no significant differences are noted, then they may 
be placed in the reconstruction matrix: 


New assumed values 


Sc=Mp 


Alphabet 1 
Alphabet 2 
Alphabet 3. 
Alphabet 4 
Alphabet 5 


Pc=Ap, 
Bc=Pp, 


Rc=Op 
Sc=Pp, 


Yc=Dp, Wc=Cp, Pc= Yp 


Gc=Tp,. Ac=Np 


13-15. ~ 
The Reconstruction Matrix 
a. The values previously established when inserted 
in the reconstruction matrix would result in the 
matrix shown in figure 13-26. 


P 
ABC DE F G H I J K L M·N 0 P Q R S. T U V W X Y Z 


Cl 


C2 


C3 


C4 


C5 


I 
c 
u 
Q v 


p 
w 
s 


W:t G 
GB 
p 


c 
M 
Q R V 


M 
Q 
v 
A 
s 
I 
G 
c 


Figure 13-1!6 r}?5. I mertion of recovered values ( U) . 


In so doing an inconsistency becomes apparent. Note 
P CDF 
P R S T 
the sequences C W Y G in alphabet 3 and C I - G 
in alphabet 5. If, as has been assumed, the same 
sequences are being dealt with, this is an impossible 
situation. One or the other must be wrong. Therefore 
the value of each must be reexamined. In alphabet 3 


0 
D 
- 
- 
the values W and Y were derived by analysis while 
the position of Gc below Ep was purely on the basis 
of inspection of the frequency distribution. The 
5 
placement of Gc below the Tp was on the basis of 
assuming the word ATTACK. Therefore it is now 


3 
determined that the initial assumption of Gc as 
Ep is incorrect. Yet, as seen in the triliteral frequency 
3 
distribution, Gc behaves like a vowel, therefore it 
should be replaced beneath a vowel other than E 
But which one? Perhaps an answer can be found by 
ignoring the Gc in alphabet 3 for the moment and 


applying the principles of direct ,;ymmetry of 
position to transfer vo\vels. Thus the matrix \\-ould 


now appear as shown in figure 13-27. 


P 
A B C D E F G H I J K L M U 0 P Q R S T U V W X Y Z 


Cl 


C2 


C3 


C4 


C5 


A 


p 


I 


M 


s 
I 


w 


W:t 


G 
c 


L_ '-~ 


G 
c 


M 


R V 
'- 


M 
QR v 


s 
I 
I 
I 
I 


B 
I . I 
lp 


Q R V 
A 
S[ 


A 
s 
I 
cl I c[ 
L 


I 


Figure 13-1!7 (C). Insertion of recovered values, step 2 (C). 


b. The relative position of letters in each sequence 
is such that the use of a keyword mixed alphabet as 


the secondary component can be safely assumed. 


In particular, note the sequence M-- QRV in alpha- 
bets 1, 2, 4, and 5, WY in alphabet 3. Note also 
the A-S-I-G-0 sequence, again ih alphabets 1,· 2, 
4, and 5. These sequences are reminiscent of portions 
of a keyword; A-8-I-G-C being the keyword, 
possibly the G marking its end; the QH'V being a 
mid portion, and WY of alphabet 3 marking its 
end. Previously in alphabet 3, G was incorrectly 
placed immediately following the Y. Perhaps, in- 
stead, a Z should be placed there. In the case of 
the sequence M- - QRV, 0 and P should be placed 
between the M and Q; thus, N could be placed 
between the I and G of the sequence A-SOI-G-C. 


If this was done G would then fall beneath a vowel 
in alphabet 3 as required. This placement would 
then allow the reconstruction matrix to be expanded 
rfig. 13-28). 


P 
A B C D E F G H I J K L M R 0 P Q R S T U V W X Y Z 


Cl 
A 
s 
IN G B r.: 
M 0 p Q l:r v w y ;:: 


C2 
p Q R V w :t z 
A 
s 
I ll G o C 


C3 
R V w y z 
A 
s 
IN G H C 
(f 0 p Q 


C4 
I il G H c 
/10 p Q R V w y z 
lA 
s 


C5 
MO PQ R V w :t z 
A 
s 
I ., ,, G H ci 


Figure 13-1!8 yn. Expansion of matrix ( U). 
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1 3-16. ~ompletion of the Solution 


a. Having reached this point in the analysis, the 
next step is to again transfer the newly assumed 
plaintext values to the cryptogram being :'!tudied. 


The object is twofold. First, by so doing the validity 
of the assumptions may be proved or disproved, 
according to the structure of the resultant plaintext 
produced. Second, if the assumptions are proven 
valid, their insertion into the cryptogram will 
enable the analyst to assume new plain-to-cipher 
values. Accordingly, this will produce the following 
partially recovered cryptogram (fig. 13-29). 


A 


B 


c 


D 


E 


F 


G 


H 


J 


K 


L 


H 


N 


p 


Q 


R 


s 


5 
10 
15 
20 
25 


QWBRI 
VWYCA 
ISPJL 
RBZEY 
QWYEU 
REPOR 
TEDEN 
EHY 
SHE I 
RED 


LWMGW 
ICJCI 
/vfl'ZEI 
MIBKN 
QWBRI 
EWCH 
ESTER 
0 E R 
OOP S 
REPOR 
VWYIG 
BWNBQ 
QCGQH 
IWJKA 
GEGXN 
TEDAT 
HENDE 
RSOl~ 
EE 
li 
G 0 S 


IDURU 
VEZYG 
QIGVN 
CTGYO 
BPDBL 
E WO 
T ERT 
ROOFS 
I ORC 
HA D 


VCGXG 
BKZZG 
IVXCU 
NTZAO 
BWFEQ 


TSO T 
H EST 
ED E 
F EWC 
HE 
E 


QLFCO 
MTYZT 
CCBYQ 
OPDKA 
GDGIG 
R EC 
0 DS 
ISPRE 
PA 
U 
G 0 T 


VPWMR 
QIIEW 
ICGXG 
BLGQQ 
VBGRS 


TACKF 
. ROM H 
ESC T 
H ONE 
TROOP 
MYJJY 
QVFWY 
RWNFL 
GXllFW 
f.JGJKX 
OF 
I 
RD QI 
STI1 
c:u-H 
OS 
IDDRU 
OPJQQ 
ZRHCN 
VWDYQ 
RDGDG 
E 
0 
PA N 
WC ES 
TE RE 
S 0 T 
BXDBN 
PXFPU 
YXNFG 
l.fPJEL 
SANCD 


H 
DS 
Q 
M 
VNT 
0-A- 
CIG{E 
SEZZG 
IBEYU 
KDHCA 
MBJJY 
KILCJ 


C EST 
ER R 
EN 
OR 
0 E 
MFDZT 
CTJRD 
MIYZQ 
ACJRR 
SBGZN 
0 S 
I 
0 
OODSE 
AS OF 
CROSS 
QYAHQ 
VEDCQ 
LXNCL 
LVVCS 
QWBII 
RFI E 
'T 
EE 
Iill 
DBEP 
REPAR 


IVJRN 
WNBRI 
VPJEL 
TAGDN 
IRGQP 
ED OS 
UPPOR 
TA 
KO S 
ECO~D 
ATYEW 
CBYZT 
EVGQU 
VPYHL 
LRZNQ 


A D H 
IRDS 
OOU 
TAD 
CEBE 


XINBA 
IKWJQ 
RDZFY 
KWEZL 
GWFJQ 


OUDN 
E C E 
S ER 
E S 
GE 
E 


QWJYQ 
IBWRX 
RE RE 
ERCO 


Figure 13-29 t· Plaintext partially recovered (U). 


b. With the wealth of plaintext values now added 
to the cryptogram, the final solution is quite simple. 


With but little effort, the plaintext can be inferred. 
For example, line A and the first group of line B 
reads: 


REPORTED ENE~IY HA~ RETIRED TO_ 


NEW CHESTER 


Using the values established by this assumption, 


the basic cipher sequence, again through the process 


of direct symmetry of position, can be expanded 
to: 


Cl. AUS INGBC J LMNOPQRVWYZE 


with only the letters D, F, H, K, T, and X unplaced, 
recovery of the keyword follO\vs 
immediately. 
Considering the positional limitations of the se- 
quences, the keyword mixed sequence is deriYed as; 


EXHAUSTINGBCDFJKLMOPQRVWYZ 


and the repeating key is APRIL under Ap. 
c. A reconstruction of the cipher matrix using 
the above key and sequences reveals the message as: 


REPORTED ENEMY HAS RETIRED TO 
NEWCHESTER(.) ONE TROOP IS 
RE- 


PORTED AT HENDERSON. :\IEETI~G 
HOUSE(.) TWO OTHER TROOPS IX OR- 
CHARD AT SOUTHWEST EDGE OF XE\Y- 
CHESTER(.) SECOND SQ IS PREPARIXG 
TO ATTACK FROM THE SOUTH(.) OXE 
TROOP OF THIRD SQ IS ENGAGING 
HOSTILE TROOP AT NEWCHESTER(.) 
REST OF THIRD SQ IS :\IOVIXG TO 
ATTACK 
NEWCHESTER 
FRO:\l 
THE 


~ORTH(.) MOVE YOUR SQ INTO ·woODS 
EAST OF CROSSR(OADS) FIVE THREE 


NINE AND BE PREPARED TO SUPPORT 
ATTACK OF SECOND AND THIRD SQ(.) 


DO 
NOT 
ADVANCE 
BEYO~D NEW- 
CHESTER(.) MESSAGES HERE(.) TREER, 


COL(.) 
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Section Ill. r.;:) SPECIAL CASES AND THEIR SOLUTION 


1 3-17. ~Solution of Message Using the Same 
Alphabets-Different Key-Completing 


the Plain Component 


a. It sometimes happens that correspondents will 


use the same primary components tp encipher a series 
of messages, only using a different key for each 
message. In this case, if one message is recovered and 
the primary components are reconstructed, the situ- 
ation is then one of a message enciphered using a 


known sequence. Thus the possibility arises that all 
subsequent messages can be solved by completing 
the plain component. 
b. In previous paragraphs it was shown that, in the 
case of monoalphabetic ciphers, completion of the 
plain component was based on inscribing a normal 
alphabetic sequence below the plain component 
equivalents, the plaintext then appearing on one 
generatrix. Also, as was shown in the case of poly- 
alphabetic ciphers using standard alphabets, the 
plaintext equivalents of each alphabet involved 
reappeared on the same generatrix; thus it was only 
necessary to combine the proper generatrices to 
reproduce the plaintext. In the situation under dis- 
cussion both processes are combined. The techniques 
involved are explained in the following paragraphs. 
c. Presupposing that the message in figure 13-30 


was enciphered using the same primary components 
5 
10 
15 
20 
25 


A 
SFDZR 
YRRKX 
MIWLL 
AQRLU 
RQFRT 


B 
IJQKF 
XWUBS 
MDJZK 
MICQC 
UDPTV 


c 
TYPJJli 
TRORV 
BQLTI 
QBNPR 
RTUliD 


D 
PTIVE 
RMGQN 
LRATQ 
PLUKR 
KGRZF 


E 
JCMGP 
IHSMR 
GQRFX 
BCABA 
OEN'J.'L 


F 
PCXJ/.J 
RGQSZ 
VB 


Figure13-30 (C). Ciphertextforanalysis (U). 


as were used in the preceding example, the first step 


is to determine 'the period or number of alphabets 
involved. 
(1) The size of the sample and the repetition 


llfRGQ occurring at an interval of 21 snggests poly- 


alphabetic encipherment with a period of either 3 or 
7. The repeated trigraph DPT at an interntl of 2S 


tends to confirm the period as being 7. Tluts the 
message is then transcribed into se\·en colttmns- 


each column corresponding to one period, indicating 


the use of one alphabet. 


1 2 3 4 5 6 
7 
SFDZRYR 
RKXMIWL 
LAQRLUR 
QFRTIJQ 
KFXWUBS 
MDJZKMI 
CQCUDPT 
VTYRNHT 
R 0 R V B Q L 
TIQBNPU 
RTUHDPT 
IVERMGQ 
NLRATQP 
LUKRKGR 
ZFJCMGP 
IHSMRGQ 
RFXBCAB 
AOEMTLP 
CXJMRGQ 
S Z V B 


(2) With the message rearranged to rrtlrct th0 


use of its alphabets, the following st0p l·on,.;isr,.; of 
converting each column to a plain 
('"ll1JHll1l'll t 
equivalent. This is done by juxtaposing thP n•con- 


structed cipher component against 
t lw 
normal 


plain component at any arbitrary point. tlwn listing 
the pseudo-plain equivalents in columnar form 
reading from the cipher component, a,; folio"·,;: 


P-P 
c 


ABCDEFGHIJKt1\1N 
EXHAUSTINGBCDF 
1234567 


0 P Q R S T U V W X 1· 7- 


J K L M 0 P Q R V W 1· 7- 


c 
P-P 
SFDZRYR 
FNMZYVY 


~ONI:IOJ;NTIAL 
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For this it is not necessary to convert all rows-just 
(3) Selecting the first five lines of plain com- 
a sufficient number to form a basis for the subsequent 
ponent equivalents produced by the preceding step, 


step. In this case 10 rows will do: 
a generatrix diagram is produced for each by in- 
1 2 
3 
4 
5 6 
7 
scribing, in columnar form, the normal alphabetic 


P-P 
FNMZVYV 
sequence below each letter. Each generatrix so pro- 
VPBRHXQ 
duced is then rough scored using the methods shown 
QDUVQ~V 
in paragraph 13-5b. This process is illustrated in 


UNVGHOU 
figure 13-31. 
PNBEXKF 
RMOZPRH 
LULEMTG 
WGYVIOG 
VSVWKUQ 
GHUKITV 


Gen. 
Alphabet 1 
Alphabet 2 
Alphabet 3 
Alphabet 4 
Alphabet 5 
Cipher SRLQKNCVRT 
FKAFFDQTOI 
DXQRXJCYR~ 
ZNRTUZURVB 
RILIWKDNBii 
1 
1 
FVQUPRLWVG 
4 
NPDNNMUGSH 
1 
MBUVBOLYVU 
lJRVGElJE¥WK 
l/HQH;{Pf..i~K£ 


2 
GWR¥QBMXWH 
7 
OQEOONVHTI 
1 
NCVWCPMZWV 
3 
ASWHFAFWXL 
W£IN¥Qi-IJU 


3 
Hf{GWRfPN?/;{~ 3 
PREPPOWIUJ 
GBWriBQHAriW 
B~ri~GBG;l?/J.: 
;{JSJgRGAA'K 


4 
~?lfPXSl:/BlJ¥J 
QGGQQPXJ¥K 
PE;{¥ERGB¥X 
Gl:/¥JHGH¥!6N 
¥K'lKABPbtib 


5 
JZUYTVPAZK 
RfPHRRQ?IKWb 
QF¥!6FSPG!6¥ 
Bl/!6UB~!6AB 
!6bl:/bB~Ql-!BM 


6 
KA¥-l,l:/WQBAk 
Sl:/~BBR!6b~ 
RG!6A GfPQBA!6 
EWAfJEJABP 
3 
AMVNCURNPN 


7 
2 
LBWAVXRCBU 
6 TVJTTSAMYN 
5 SHABHUREBA 
FXBMKFKBGQ 
5 
BNWNDVSOQO 


8 
2 
MCXBWYSDCN 
l:/WKl:/1:/~BNlJB 
4 TIBCIVSFCB 
2 
GYCNLGLCDR 
5 
COXOEWTPRP 


9 
NB¥f;t{.l,~EBB 
2 
VXLVVUCOAP 
I:IJGBrlW~GBG 3 
HZDOMHMDES 
BP¥PFXI:IQSQ 
10 
4 
OEZDYAUFEP 
0 
WYMWWVDPBQ 
VKBEJG{l:JHEB 
8 
IAEPNINEFT 
EQ!6QG¥l/R~R 
ll 
PFAE.l,B¥fiFQ 
W!6NXXWEQGR · 3 
WLEFLYVIFE 
dBFQBr/BFGI:I 
5 FRARHZWSUS 


12 
2 
QGBFACWHGR 
4 
YAOYYXFRDS 
;{}{FGM!6WJfiF 
KGGRPKPGH!/ 
6 GSBSIAXTVT 


13 
3 
RHCGBDXIHS 
!6BP!6.l,?/GBE~ 
¥NGHNAXKRG 
bBHSQbQH~W 2 
HTCTJBYUWU 


14 
5 SIDHCEYJIT 
AGQAA.l,H~FI:I 
4 
ZOHIOBYLIH 
ME~~RMR~J;{ 
B:IBI:IKGg;,·xr,r 


15 
fPJE~BFlJKJl:/ 
3 
BDRBBAIUGV 
AP~JPG!lJ.IJ~ 
NFJl:/SNBJK¥ 
2 
JVEVLDAWYrl 


16 
1:/KFJEGA.kK¥ 
2 
CESCCBJVHW 
BQJKQBANKJ 
BGKWGfPKf,g 
KWFI-r'l-!EBXgx 


17 
0 
VLGKFHBULW 
BFfPBBGKW~;{ 
GRK.bRBBBbK 
1 
PHLWUPULMA 
f,XGX#FG¥A¥ 


18 
2 
WMHLGICNMX 
EGI:IEBBUJ?/ 
2 
DSLUSFCPNL 
Q~M;{¥{f¥MNB 
M?IH¥G&BgBg 


19 
;(N~NHJBBN¥ 
FH¥FFEM¥K!6 
5 
ETMNTGDQNM 
5 
RJNYWRWNOC 
#f6~gPHEAGA 
20 
¥BJN~KEPB.l, 3 
GIWGGFNZLA 
6 FUNOUHERON 
SKB!6XGXGPB 
GA.JA.Q£FBGB 


21 
.l,PKBJbFQPA 
HJXHH(;f}AHB 
4 GVOPVIFSPO 
4 
TLPAYTFPQE 
PBKBRJGGEG 


22 
AQkPKHGRQB 
4 
IK.YIIHPBNC 
HWPQWJGfPQP 
I:IMQB!6Y!l.QRF 
QGbGSKHGFid 


23 
4 
BRUQLNHSRC 
Jb!6JJ~QGBB 
~;(QRXKRYRQ 6 
VNRCAVARSG 
5 RDMDTLIEGE 
24 
7 
CSNRMOITSD 
KMAKKJRBPE 
5 JYRSYLIVSR 
4 
WOSDBWBSTH 
4 
SE!lE0i·1JFHF 


25 
6 
DTOSNPJUTE 
bNBbbKBBQF 
K!6SP¥.MJWfPS 
;(PPEGifb'!fi:i~ 
4 
TFOFViiKGIG 


26 
El:/P~BQK¥1:/F 3 
MOCMULTFRG 
bA~YANJG{I:IfP 
¥QYFB¥BI:I¥J 
1 
UGPGWOLHJli 


Figure 13-31 cy>. Rough scoring of generatrices ( U). 


13-iO 
CONFIOENTIAL - 


r..nN I=" I AIPNTI41 


(4) Those generatrices with the highest score 
are then set down in columnar form to determine if 
they will yield plaintext. 


Alphabet 
Generatrix 
1 2 
3 4 
5 
24 2 20 10 12 


C 0 F I G 


S Q U A S 


N E N E B 
R 0 0 P S 


M 0 UN I 


0 N H I A 
I V E N X 
T H RET 


S T 0 F V 
D I N T T 


(5) The presence of plaintext in the matri.'C 1s 
obvious. However, it is also noted that generatrix 
12 of alphabet 5, although the highest word, is not 
correct. Therefore another is selected in its place. 
Also, since a period of seven was initially assumed, 
the diagram is expanded to include seven columns, 
the previous step being completed to produce the 


necessary generatrices. Thus the text would appear 
as: 
Alphabet 
1 
2 
3 
4 
5 
6 
7 


C 0 F I R S T 
s QUADRO 
NENE:\1YT 


R 0 0 P D I s 
MOUNTED 
0 N H I L L F 
I V E N I N E 
THREEWE 


S T 0 F G 0 0 


D I N T E N T 


(6) Comparing the first period of plaintext 
with the first period of ciphertext, and :-;etting the 
plain and primary components so as to produee the 
equivalency shown in each alphabet of the period, 
the key may be recovered. For example, in 


1 2 3 4 5 6 
7 


P 
C 0 F I R S T 


C 
S F D Z R 1- 
R 


it is observed that Cp= Sc. This equation can be 
duplicated by juxtaposing the t\HJ primary ,.;e- 


quences so: 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 
EXHAUST I NGB ODE FJ KLMO P Q RVWY Z EXHAUSTINGBCDFJKLJIOPQRVH'YZ 


ThusAp=Ac. 
Continuing the process of juxtaposing it will be 
found that 


when 


Cp=Sc 
Op=Fc 


Fp=Dc 
I p=Zc 
Rp=Rc 


Sp=Yc 


Tp=Rc 


then 


~=k 
~=& 
~=k 
~=~ 
~=~ 
~=Th 


~=ffi 


The repeating key then is AZIMUTH. Using this, 
the enciphering matrix can then be reconstructed 
and the entire message deciphered. 


13-18. ~The Principles of Matching-Solution 
of Messages Involving an 
Unknown 


Component 


a. In the preceding example the proposition was 


the solution of a message where both the primary 
plain and cipher components were known. The 


key-which controlled the succ.essive juxtaposition- 
producing the secondary cipher sequences. \\·a,; the 


unknown element. This case is one where only the 
primary cipher sequence and key length is known, 


the key is unknown, and the primary plain com- 


ponent is unknown. The normal eondition, i.e. 
\\·here the plain component is kno\\·n, twrmits t lw 
use of the principle of direct symmetry of positions. 


In this case where only the cipher seq ueneP i,.; tlw 


known element, the use of direet 
symmt~try of 
position or completing the plain eomponents is 
prohibited. Instead, the prineiple of matehing may 
be used. 
b. This principle is founded on the fact that a form 
of symmetry, in this case spatial, exists bct\n'en the 
successive peaks and troughs of seeondary cipher 


sequences which are produced by t ht> juxtaposition 


of the two primary components. This spatial ,;ym- 


metry can be seen in the follO\dng distributions, 
figure 13-32, drawn from a cryptogram product'd by 
the method under discussion \\'hieh in vol n'd five 


secondary alphabets. 
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Alphabet 1 
-- 
- 
- 
-- -- 
= 
- 
- 
i! 
~==i~=~~-~==- 
sE== ~~ 
A B C.D E F G HI J K L M N 0 P Q R S 1' U V W X Y Z 


Alphabet 2 


= 
- 
=- 
.E 
_ 
iis 
=~ 
• =~z~=~=-~=z -=~2= ~·-= 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Alphabet 3 


& 
E _E _E 
5E 
_ 
~ 
~ -~=-~ - 
-~2 
-- 
= -= 
===~&~~ ~ -=ee= == 
-~ •-~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Alphabet 4 


~ 
_:::;r_ 
_e: __ 


~~ 
3!~- 
=~ 
=-=-g~~==~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


~ 
-=~~ 


-- 


~ 
~ 


Alphabet 5 


=~ 
----- 
~- 
~= ~-~- 
~~~= ~~ : 
-=-=E~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Figure 13-32 r;'>- Uniliteral frequency distribution, secondary cipher sequences (U). 


Note that in each of the distributions the spatial 


relationships between the peaks and troughs remain 
constant, but that between distributions, their 
positions relative to any given letter differ. In this 
case, the highest peaks occur in successive alphabets 
above the Nc, Kc, Ac, Be, and Ec in that order. The 


spatial symmetry is a result of juxtaposing one fixed 
sequence against another fixed sequence. The differ- 
ence between the relative location of the peaks and 


troughs in each distribution is the result of using 
successively different points of juxtaposition. 


reflected in the distributions, will show to n g-ren tl'r 


or lesser degree the normal frequeneies of mono- 
alphabetic usage. Spatially, ·in tht> case wher·e both 
components are standard, it will be the same as tlw 


normal, only offset to the same dt>g-rN' ns 1\"l'l'<' the 


primary components. Where mixt>d rom potH'Il ts nrP 


used in either or both compotwnts. this ,;JHltinl 


relationship, relative to the normal, is lost. Holl"l'n'l'. 


the frequency of usage of individual kttPrs, as 


reflected in peaks and troughs, remains. The fnct that 


this can be observed nt all indicates thnt the riplwr 


sequence is a known sequence. Note that in tlw abon', 


the cipher sequence is known, nnd in this cnst> is a 


standard alphabet. However, when tlw riplwr nlplln- 


bet is 11 mixed alphabet, the same principles "-ill 


c. It was remarked earlier that a periodic poly- 
alphabetic cipher was really nothing more than a 
series af monoalphabetic substitution ciphers used in 
a periodic or cyclic manner. Thus each period, as 
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apply if its sequence is known. But in that case, the 
distribution must be made using this sequence of 
letters. In either case, if the wrong sequence is used 
the symmetry between each distribution will be lost. 


d. With the knowledge that each distribution is a 
monoalphabetic distribution reflecting the under- 
lying plaintext, several possibilities. are immediately 
opened. First, by matching the peaks and troughs of 
each and bringing them into agreement, relative 
equal values can be determined. That is, Ne, Ke, 


A.e, Be, and Ec, the highest frequency letter of each 
distribution, can be equated as representing the 
same plaintext value. If this is so, then, because of 
the similar spatial relationship between each distri- 
bution, all letters can be equated. Second, as the 
peaks and troughs represent the underlying plain- 
text frequencies it becomes possible to identify an 
equated series of letters to one specific plaintext 
value. Barring the fact that specific identification is 
possible, the assignment of an arbitrary plaintext 


va,lue to each set of equated cipher values permits 
the reduction of the plaintext to monoalphabetic 
terms. The first step then is matching the distribu- 
tions. This involves the cyclic shifting of the alpha- 
bets as seen in figure 13-33. 
Alphabet 1 
= 
=-= 
-~== =-=:- 
- 
= 
!!!! 
__ a5~~g ~~~-~==- 
~~=s ~• 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Alphabet 2 


- 
== 
_. - 
.i!e 
::.E 
= _g ~B:=~=-•=• -=~2~ 22- 
x Y Z A B C D E F G H I J K L M N 0 P Q R S T U V W 


Alphabet 3 


j! 


i!!! 
~ J! 
~ 
= 
i!!! 
-= ~-=2~=~~~~- = -=-~= ==- 
TUVWXYZABCDEFGHIJKLMUOPQRS 


Alphabet 4 


- 
- 


=-=-;11==~=•=- _elz 
JJ_ 
OPQRSTUVWXYZABCDEFGHIJKLMN 


Alphabet 5 


- 
J! 
J!_ !! 
j! 
'!!!! 
='5 
= -a-=•~~=•- •-•- 
••~= -~ 
RSTUVWXYZABCDEFGHIJKLMNOPQ 


Figure 13-33 c.rz{. Matching by cyclic shifting (U). 


(1) Note that in the above, the sequence Ne, 
Ke, Ge, Be, Ee, was used rather than the sequencP 


Ne, Ke, Ae, Be, Ee, previously used as a frame of 
reference. This is because the alinement of Ae to thP 


other values resulted in the mismatch of the remain- 
ing high-frequency letters. This is a reflection of the 


necessity to gain the best alinement of all peaks and 


troughs. Once the alphabets ha,·e been alined, a set 


of arbitrary plaintext values can be generated. This 
can be done by substituting the values of alphabets 


2-3-4 and 5 in the ciphPrtext, for thP ,·aluC' dir0ctly 


above it in alphabet 1. Thus "·henever Xc, Te, Oc, 


and Re occurs in the cyclic positions 2, 3, 4, and 5 
respectively, an Ae is substituted. This proc0ss, the 
reduction to monoalphabetic terms, con nrts the 


ciphertext to the form shown in figure 13-:34. 


5 
10 
15 
20 
25 


A 
QHVHT LUTXI JYNFP l/GSHT EYUFii 


B 
E U T G N 
V U G Y X 
Y D H Y Y 
J N L U S 
S I T K X 


C 
YKTYN GTHYK UTHJA HXf.fND KTFYD 


D 
N H S H C K T P X N K C I G ll 
U 0 P N T N G H J K 


E 
XXKSU LDKHT PRHKX DNRKT LDKTH 


F 
BYURE UHLYN FITFN GYDNH TYKLU 


G 
SSITK XYHLJ;, UGFGN LNTYJ EXKPT 


H 
NFNEQ HVHTH TPNGS i!TEBY DNVGN 


J 
XXXHK FYDNG dAHXK TFKXV IYHIIJ 


K 
N V G U U 
0 Y D H.Y 
Y D N L U 
S K T Y U 
G T K T X 


L 
Y K P H Y 
N F Y D N 
X N K C I 
G N U 0 P 
N T N G H 


M 
J L D K H T P H T F X U S N U 0 D K X P N T N G H 


H 
JXBSK JKYHG EUMXN Gi,NGX XHKFY 


P 
DNLUI VAUIJ FDHZN MNNTK SVUXX 


Q 
K M J N I 
T J N X X 
P N T N G 
H J L D H 
T P D X I 


R 
N T J K H 
T P D U Y 
D N H F N 
F 0 U G S 
N G A H G 


S 
J U G F U 
0 S H T L 
D I G K H 
D H F 0 U 
G S N F H 


T 
THJJK HTLllA KYDYD 1/LUSS ITKXY 


U 
JNHFN GXDNA HXXIV VUXNF YUMNO 


V 
KPDYK TPBXI LDHTH JJKHT LNYDN 


W 
X N U M X 
N G Z N G 
X F N L J 
H G U F U 
V ll T N F 


X 
I V H G N F G U I Y N 0 G U S S U X L U A Y U T U 


Y 
GYDHT FLNTY GHJLD KTHB 


Figure 13-34 (C). Ciphertext reduced to monoalphabetic 
terms (U). 


(2) By compiling the individual frequency 
distributions using the same method as was used to 
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convert the text to monoalphabetic terms, a uni- 
literal frequency distribution for the text can be 
generated which in effect is merely a tabulation of 
the former five. See figure 13-35. 


~ 
~ 
~ 
~ 


__ i 
= ~ 
I= 
¥e~ 
~ 
~ 
~~ 
~ 
~~. 
~ 
~ 
~~ ;§ 
~ ~~~ -~== §§ 
~~ 
~% 
~~ 
~ ~~$-~~$ ~ 
=~~ 
~ ~~~~~~~ ~ ~ 
~~~= 


- 
~ = ~ ~ ~ ~ ~ ~ ~= ~ ~ 
~ ~ ~ 
~ 
i~= ~~ j§ ~~ ~ ~~ ~~~~~==;E~~~ 
~E 


A B C D E F 
G H I 
J 
K L M N 0 
P Q R S 
T U V W ~~=­ 
X 
Y Z 


7 5 3 31 7 25 36 54 17 21 38 22 5 69 9 15 2 3 19 48 38 12 
38 39 3 


Figure 13-35 ( U). U niliteral frequency distribution of monoalphabetic terms ( U). 


e. Subsequent analysis of the cryptogram is 
now quite simple. The text converted to uniliteral 
terms can be attacked through an analysis of idio- 
morphic patterns, repeated digraphs, trigraphs, etc. 
In the course of determining the correct cipher 
equivalents for the pseudoplaintext, in this case 
alphabet 1, the mixed-plain component will be 
found. With this as a base, it only requires that 
the cipher components and plain components be 
juxtaposed to produce the values shown in each 
distribution; the process resulting in the reproduction 
of the enciphering matrix and the keyword. 


13-19. ~ 
Application of Principles-Matching 
a. In the foregoing paragraph the example in- 
volved the use of a. standard sequence as the cipher 
component. In this example a mixed sequence is 
used. It will be observed that irrespective of the 
type sequence used, the principle of matching may 
be applied if the cipher sequence is known. However, 


·if the cipher sequence is unknown, these principles 
cannot be applied. 
b. The first step, as in all cases of the analysis of 
polyalphabetic ciphers, is to underline observed 
repeats and tabulate intervals and factors as shown 
in figure 13-36. 
c. The derived factors show that the period 
involved is probably five. Since the text is in groups 
of five, its rearrangement is not required. Now, 
assuming that through preknowledge the primary 
cipher component is probably a keyword mixed 


A 


B 


c 


D 


E 


F 


G 


H 


J 


K 


L 


g 


N 


p 


Q 


R 


5 
10 
15 
20 
25 


ICENX JJBllL QUKDA NPIQA QJP!?_l 


!.....f...!.MH BC.MBD KZPVZ WPABH 
QJi·.'~ 


BCIFM JKFSC TZPFD NHSEH HHCIA 


NELAY AVFNY f.:ILYX JPQJi:: WE::Kt.'W 


A C M B U W E G G G 
K C K G J 
Z F E B r 
I C P P A 


J A M X C Q D N N U N U C T A X E ~ E ~ K K 0 A A 


I H R G P J E G E C M W A X T J H D V Z T Z R N X 


N Q P 0 A K E A F Q Q Z 0 J N Q J I I ~ I C J Y H 


N K R G D 
V P E C X 
N U U A !I 
W C l.' W A 
0 H .~ .'< ;; 


J P M C Q V H R Y X J N L D E T Y Q E G ~ K R 2 J 


Q G 0 E Z I V P F J 
E N L D E T H N K F B H A I li 


Y K Z G C E P R C B 
J P 11 N G M K I I C R H H A X 


QDPWF ZGAFH 1/i::KEC WRPEG ZPo<AB 


H I B S F V J P I Y Y C ~ B H H K X ~ ~ ~ F E E J 


W B A B F 
M C P X C 
T Q Z G Y R C D A X 
Q ;.; P K ~ 


ICMXX 


Repeats 


B TIC P 


MHBC 
MBDK 
M L DE T 


Interval 


95 


20 
110 


25 


~ 


5 
19 
2. 4. 5. 10 


5. 10. ll 
22 
5 


Figure 13-36 (C). Period determination (U). 
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alphabet based on the word PURLOIN, five separate 
distributions using this mixed alphabet are prepared 
(fig. 13-37). 


Alphabet 1 


-- 
- -- 
- 
-= 
~l== = 
=i~l~ !=~-== 
1: 
P U R L 0 1 N A 8 C DE F G H J K M Q S T V W X Y Z 


2: 


3: 


4: 


5: 


- 1 2 - - I I 2 3 - - 2 - - 3 9 4 I 9 - 5 3 G 1 2 3 


Alphabet 2 
= 


~ = 
= 


~=- 
= -- 
~=~==~l~==- 
=- -= 
PURLOINAB CDEFGHJKMQSTVWXYZ 
G 3 1 - - 2 - 1 1 13 2 I 2 2 9 5 I 3 2 - - 2 1 - 1 4 


Alphabet 3 
= 


~ 
E-l~=~=~===~== -EE~- 
_ = 
PURLOINABCDEFGHJKMQSTVWXYZ 


12 1 I 4 3 4 2 6 2 2 2 4 2 2 - 1 5 9 4 1 - - - 1 - 2 


Alphabet 4 


= 
__ -E~i~==~E~ -==-=-==== 
PURLOINABCDEFGHJKMQSTVWXYZ 


1 - 1 - 1 5 9 6 a 3 3 1 s 6 - 1 3 2 1 2 1 2 2 3 3 - 


Alphabet 5 


= = 
= 
- = - 
= ~ = -i ~ = 
~ ~ l = = = = - ~ ~ '§ 
PURLOlllAiiCDEFGHJKMQSTVWXYZ 


1 2 - 1 - - 3 8 2 I 5 3 4 4 I 3 - 3 2 - 3 - 1 I 4 4 


Ft"gure 13-37 (Jl). Uniliteral frequency distribution of periodic 
cipher alphabets ( U). 


d. Visual inspection shows that the profile of 
each one is similar. The next step is to aline the 
alphabets to bring the peaks and troughs of each into 
conformance. Normally this is a step by step process. 
Two alphabets are selected and juxtaposed in what 
appears the most probable alinement. Note the 
possibility that any one of 26 juxtapositions are 
possible, but consideration of profiles immediately 
limits this to but a few. In this case three possible 
initial matches may be considered (fig. 13-38). 


e. Of the three most probable matches, match 3 
seems best so it is selected. Using these two alpha- 
bets as a base, the third alphabet is compared, 
again in several probable positions, until one is con- 
sidered best. Thus in turn all alphabets are matched. 
The result of the process is shown in figure 13-39. 


Match l 


Match 2 


~latch 3 


Alphabet l 


-= 
~~== 
= 
=~~l~ ~=~-== 
P U R L 0 I N A 8 C D E F G H J K M Q S T V W X Y Z 


- l 2 - - 7 7 2 3 - - 2 - - 3 9 4 7 9 - 
5 3 6 l 2 3 


Alphabet 2 


== 
=- 
-~~=- 
= ---=~==~~¥ 
M Q S T V W X Y Z P U P L 0 I N A 8 C D E F G H J K 
3 2 - 
- 
2 1 - 1 4 8 3 1 - - 2 - l 1 l 2 7 2 2 9 5 7 


Alphabet 1 


-- 
l~== 
= 
=~~~l ~=l-== 
P U R L 0 I N A 8 C D E F G H J K M Q S T V W X Y Z 
- l 2 - - 7 7 2 3 - - 2 - - 3 9 4 7 9 - 5 3 6 1 2 3 


Alphabet 2 


= 
= 
- 
- 


~~=- 
= 
---=E==Ei~== 
=- 
- 
Z P U R L 0 I N A 8 C D E F G H J K M Q 5 T ~ W A Y 


4 8 3 l - - 2 - 1 1 1 2 7 2 2 9 5 7 3 2 - - 2 l - 1 


Alphabet 1 


-= 
¥~== 
= 
=~~~1 ~=j-== 
P U R L 0 I N A B C D E F G H J K M Q 5 T V W X Y Z 
- l 2 - - 7 7 2 3 - - 2 - - 3 9 4 7 9 - 5 3 6 l 2 3 


Alphabet 2 


- 
~ = 
~ = 
=- 
-~~=- 
= -- ~=~==~'jE;g== 
TVWXYZPURLO·INAB CDEFGHJKMQS 
- 2 1- l 
~ 8 3 1-- 2- 1 1.13 2 7 2 2 9 57 3 2- 


Figure 13-38 (ftl. Possible matches, periodic cipher alphabet 1 
1. 
and 2 (U). 


Alphabet 1 


Alphabet 2 


Alphabet 3 


Alphabet 4 


Alphabet 5 


-- 
- 
-- 
- 


~~ - 
-~-~~ ~-~ 
- 
-= 
~~== = 
=~=~~ ~=~-== 
P U R L 0 I N A 8 C D E F ~ H J K M ~ S ~ 1 W X Y : 


- l 2 - - 7 7 2 3 - - 2 - - 3 9 4 7 9 - 5 3 6 : 2 3 


= 
;E = 
~ = 
-- 
-=~=- 
= -- ~=~==%~~== 
T V W X Y Z P U R L 0 I 
~ A B C C E F J H J K ~ Q S 


- 
2 l - 
l 
1, 8 3 1 - 
- 
2 - 
l 1 13 2 7 2 2 9 5 7 3 2 - 


= 
-g = 


¥-~ - 
~ z_- - 
~ 
- 
--- 
--- 
- 
- 
---- --- 
--- 
- 
-- 
- 
- 
- ---- --- 


£ F G H J K M Q S T V W X Y : 
P U R L 0 I N A B C J 


4 2 2 - 
1 5 9 4 l - 
- 
- 
l - 
2 12 l 7 4 3 4 2 6 2 2 2 


-------- - - 
-illl~~%%i 
M Q S T V W X Y Z P U R L 0 I ~ A 3 C D E F G H J K 


2 1 2 1 2 2 3 3 - 1 - 1 - 1 5 y 6 3 3 3 7 5 6 - 1 3 


-~-- 
*- %-'l --*- 
= = - ==-= - = = === = = 
QSTVWXYZPURLOINABCDEFGHJKN 


2 - 3 - 1 7 4 4 1 2 - 1 - - 3 8 2 7 5 3 4 4 8 3 - 3 


Figure 13-39 (~. Final match of periodic cipher 
alphabets ( U). 
-cON f'l DENTIAI:" 
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5 
10 
15 
20 
25 


1\ 
F P A P F 
P V X P L 
S H F T P 
G G U 8 P s v p p c 


B 
F P P A W I P G R S 
Q F P E H 
W G W R W s v c 11 r.; 


c 
I P U V Z 
P W IJ C R 
U F P V S 
JIUII./W 0 C l 0 F 


D 
G R S Q G H 8 8 F G R L S H F 
P C H Y T 
W R F i' i:: 


E 
H P G R J 
W R C W V QFFWS 
;; SA R C 
F p p J p 


f. If the columns of letters formed by the match 
are inspected, the repeating key "THIEF" may be 
observed, which lends credence to the match. More- 


over, this might be the point of juxtaposition of the 
cipher alphabet to Ap. Unaware that the plain 
component is a mixed sequence, the analyst arbi- 


trarily presumes a direct standard for the purpos-e 


of reducing the ciphertext to monoalphabetic terms. 
Thus Ap equals Pc, Tc, Ec, Me, Qc; Bp equals Uc, 


Vc, Fe, Qc, Sc; etc. A standard alphabet is inscribed 
above the matrix shown above, and it is used to re- 


duce the ciphertext to monoalphabetic terms. The 
reduction produces the text illustrated in figure 


13-40. 


F 
P N G G R s Q v p J 
G H Y :.J P 
XR(j_RS QfiTQF 


g. Compiling the individual frequency distribu- 
tions, a uniliteral frequency distribution for the 
text is genera ted (fig. 13-41) . 
h. Inspection of the text reveals the initial idio- 


morphic pattern. • 


c 
A B C B A 
F PAP F 
B D E B 
PVXPL 


r. 


H 


J 


K 


L 


~~ 


H 


p 


Q 


R 


FURfii 


GYP N P 


Gf/RWS 


P G GSA 


S T T U H 


Y W 0 W R 


S Q P F U 


0 L X C U 


W 0 W R U 


F P G X X 


P R CUR R C W G C 
P U 2 E H 
U F R P P 


QRfiVA SF T P Z s v u 0 0 
F P E H II 


V G A SF G H Q Q 0 
WPGFP 
B U F Z 0 


VUR!iF P X S 7' T 
U E II U V 
R W R L X 


E'BPVX L X S 1' T u u v z u IUf!Ofl 


L G R S Q P G G P V 
R W U 0 R 
C U R Q F 


Z T W V W G R FUR 
f/ I P U V Z G H Q Q 


V V P 0 G YPHP.W 
0 w i·.' p z R SA ''--' X 


R P P G R u y 0 w c 
C P Z Q F s i p : fi 


Which may be a reflection of the underlying plain- 


text-REFERENCE; which may be part of the 
phrase "REFERENCE MY (YOUR) :MESSAGE." 


If this is correct Pc would equal Ep, an assumption 
warranted by the frequency shown for Pc. With this 
an entering wedge, the plaintext a~d accompanying 


Figure 13-40 r;tJ. Ciphertext reduced to monoalphabelir 
terms (U). 
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~~ 
il~ 
=- ~ 
~ ~ l- 
~~ ~-i ~ ~ ~~= ~-= 
A B C D E F G H I J K L M N 


cipher-to-pseudo-plain equivalent, figure 13-42, can 
quickly be found .. 


~ 
i 
I 
1! 
- 
! j= I I 


= i ~ I t _ i ~ 1- _ 
I ill 
~ ~ ~ i ~~~ l 
0 
P Q R S T U V W X Y Z 


8 6 10 1 5 2; 31 16 6 3 - 6 1 2 14 51 15 36 23 11 30 19 32 9 7 11 


Figure 13-41 ( U). U niliteral frequency distribution of monoalphabetic terms ( U). 


CONFIOE:NTIAL 


-CONFIDENTIAL - 


REFER EN C E Y 0 U R ME S S A G E 0 N E T H 
FPAPF PVXPL SHFTP GGUBP SVPRC 


R E E F I 
V E S T 0 PRE Q U I S I T I 
0 N S F I 
FPPAW IPGRS QFPEH W G W R W S V G A W 


V E AND E I.G H T ARE N 0 T AVA I 
L A B L E 
I P U V Z PWBCR UFPVS R U I U W 0 u y 0 p 


S T 0 P S U G G E S T Y 0 U R E SUB M I T R E Q 
GRSQG H B B P G R L S H F P G H Y T WRFPE 


U E S T W I T H I N P E R I 0 D 0 F T H R E EWE 
HPGRJ W R C W V QPFWS Z SA R C FPPJP 


C K S S T 0 P N E W S U B J E C T S T 0 PIN P Eo o o etc. 
PNGGR SQVPJ GHYDP XRGRS Q W T Q Po o o etc. 


Plain 
F G H J Q R S U V W 
y 
K L E P T 0 M A N I C S D 
Pseudo-plain 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Figure 13-4-i! <9{. Solution of ciphertext (U). 


Plain: K L E P T 0 M A N I C B D F G H J Q R S U V W X Y Z 


Cl: 
G H J K M Q s T v w X y z p u R L 0 I N A B c D E F 


C2: 
A B c DE F G H J K M Q s T v w X y z p u R L 0 I N 


C3: 
y z p UR L 0 I N A B c D E F G l1 J K M Q s T v w X 


C4: 
0 I N A B c D E F G H J K M Q s T v w X y z p U R L 


C5: 
I N A B c D E F G H J K M Q s T v w X y z p U R L 0 


Figure 13-43 5f!'(. Recovered matrix (U). 


i. In the plain sequence the keyword KLEPTO- 
MANIC is observed. By using it then as a base with 
Kp as the ind.ex letter, five cipher sequences may be 


inscribed below it to reproduce the original enciph<'r- 


ing matrix. The juxtaposition of each of th<'"(' 


sequences must be used to reproduce the original 
ciphertext. That is, the letter Ep when enciphered 


by the five successive cipher alph:1bets must result 
in Jc, Cc, Pc, Nc and .-lc respectiv<'ly. Although any 
plaintext letter may be used for this alinement 
process, Ep was chosen becaust' of its frequency. 
Thus the fo[owing matrix is reconstructed, figure 
13-43. 
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CHAPTER 14 Cf{ 


INTRODUQION TO SIMPLE APERIODIC CIPHERS 


Section I. ~SIMPLE APERIODIC SYSTEMS 


14-1 . ve{ Introduction 


a. It was demonstrated in the preceding chapter 
that the ordered use of a number of alphabets in 
periodic ciphers resulted in the occurrence of cyclic 
phenomena in the ciphertext. It was also shown how 
this cyclic phenomena could be used as the basis 
for the cryptanalysis of the cipher. This was true 
even though a greater number or different types of 
mixed alphabets were involvt>d. The significance of 
this phenomena was recognized by cryptographers, 
and means of suppression were soon considered. Two 


basic methods of suppression are available. First, the 
cyclic phenomena may be avoided simply by extend- 
ing the key length to such a .point that it repeats 
itself only a few times in a given message, and 
second, by the key length extending indefinitely, 
forming a running or continuous k~y. This particular 
solution, however, is impractical for use in all except 
machine systems. For this reason, and because the 
analysis of continuous keyed systems involves 
techniques and methods beyond the scope of this 
manual, it will not be treated further. 
b. An alternate scheme, which permits the use of 
a matrix or table similar to those of the periodic 
ciphers, is to vary the period of key usage and thus 
suppress cyclic phenomena at the outset. Considera- 
tion of why periodicity is inherent to periodic 
polyalphabetic ciphers reveals that it is composed of 
the two elements involved in its production. That is, 
successive letters of a number of alphabets controlled 
by a repetitive key are applied to successive letters 
of the plaintext. Thus, if either of these components 
are varied, an aperiodic system is generated. Note 
that in aperiodic systems cyclic repetition does occur; 
however, it does so at an irregular interval which 
serves to suppress its appearance to a greater or 
lesser degree in the text. 
c. Aperiodic systems then may be arbitrarily 
classified by the cryptographic method used to 
develop their aperiodicity, that is, by those compo- 
nents selected to vary and those selected to remain 
constant. Thus, those systems where the plaintext is 
made variable and the key sequence held constant 


may be considered as one class, and those systems 
where the plaintext is held constant and the key 


sequence used variably may be considered as anotlwr. 


Note that the resultant ciphers produced by either 
method are similar in that they will yidd to the 


same general technique of analysis. 


14-2. ~Methods of Variations 
a. One method of introducing ,-nriation in tlw 


J)laintext is by word-length encipherment. In this 


method the key is applied in its sequential order to 
successive words of the plaintext, i.e. the first ,,·onl 


is enciphered from the first alphabet. the st>coiHl 


word from the second alphabet, etc. In this manrwr 


the key is completely run through, its cyclic reuse 


beginning anew following the use of the last alphabet. 
b. One practical difficulty involn•d in decipher- 
ment of messages of this typP by cryptographic 


personnel was in recognizing the end of a ,,·on!, as 


in the case of INFORM, INFOR:\IS. I.\"FOR~IED, 


INFORMING, and 
INFOR~IATIO.\". This led 


to the inclusion of a word spparator. The \\·onl 


separator was used to mark the Pnd of a \\ortl (the 
resumption of the keying cycle at its initial point), 
thus aiding the deciphering clerk. A lo\\ -freqtwncy 


letter was selected to be the word separator because 


it was necessary to preclude the po,;:<ibility of 
interrupting the keying cycle at the \\Tong position. 
The letter selected as a separator (J or\- for PXample) 


was often excluded from the enciphering matrix, 


this being essential to avoid ambiguity in thP 


decryption. 
c. This particular method suffers from nn obvious 
fault. Since successive words vary in lt>ngth in an 
extremely irregular manner, the prol'~'"" t lwn results 


in the destruction of obvious periodicity. :\ote that 
individual words are being enciphert•d in mono- 
alphabetic terms. Thus, solution i,- quitP ,;irnple. 


If standard alphabets are involnd. completion of 
the plain component will lead to nn immediate 
solution. If, on the other hand, miwd alphabets 


are used, idiomorphism remains and provides a 


relatively. easy entry. 


c:n N F'l nl=" NTIAI 
14-1 


PANC'In~IUTIAI 
. 


d. In those cases where idiomorphic patterns are 
not obvious, the word. separator may be used as 
an initial entry. A word separator may be either 11 


plaintext value or a cipher value. The plaintext 
value will be enciphered and some,Yhat more difficult 
to recognize. If, hO\vever, it is a constant cipher value, 
it should be readily apparent. In either case, once 
isolated, \Yord separators serve to di.stinguish indi- 
vidual words, thus providing a basis for analysis 
through a study of the uniliteral characteristics of 
the words. 


Key 
1 
2 
3 
4 
5 
6 
Group 
1 
2 
3 
4 
5 
1 
p 
c 
OM 
r.fAN 
DING 
GElillR 
A 
c 
Q uw 
UGT 
KFAll 
UWNWJ 
L 


Key 
5 
6 
1 
2 
3 
4 
p 
s su 
EDO 
RDER 
SEFFE c 
c 
I 
TR 
OPE 
RFER 
OCBBC L 


Key 
3 
4 
5 
6 
1 
2 
p 
T AT 
iiOO 
NDIR 
ECTIU 
G 
c 
N 
NV 
NMM 
YIDU 
OQZKF c 


Key 
1 . 2 
3 
4 
5 
6 
p 
c 
OM 
r.1AS 
WITC 
HBOAR 
D 
c 
Q uw 
UGO 
RFUL 
TZMAJ I 


c 
QUWUG 
TKFAH 
UWNWJ 
LliNAR 


OCBBC 
LHSQH 
SWOFZ 
KDARQ 


UWPWL 
EXYHT 
QUWUG 
ORFUL 


A 
B c D E 
F 
G 
H 
I 
J 
K 
L 


1 s 
R 
Q 
p 
0 
N M L K J I 
H 
2 
I 
H G F E D c B A z y 
X 
3 G F E D c B A z y 
X w v 
4 N M L K J I 
H G F E 
D c 
5 A z y 
X w v u T s R Q p 
6 
L 
K J I 
H G F E D c B A 


14-3. (¢) Numerically Keyed Encipherment 
a. Another method of varying the plaintext is 
by using variable plaintext groupings "·hich arr 


not successive words. In this method the plaintext 
is divided into segments of predeterminPd lengths. 


Again, in the encipherment process, one alphabet 


is used to encipher each group. The key cycle of 
encipherment extends through a number of groups, 


then begins anew at its initial point once one key 
cycle is completed. Group length may exhibit u 


patterned regularity as shown in figure 14-l. 


1 
2 
3 
4 
2 
3 
4 
5 
LF 
IRS 
TARM 
YHASI 


HN 
ARQ 
NGPU 
PGNVF 


5 
6 
1 
2 
TI 
VET 
WENT 
YFIRS 
HS 
QHS 
WOFZ 
KDARQ 


3 
4 
5 
6 
TH 
ATT 
ELEP 
HONES 
llZ 
NUU 
WPWL 
EXYHT 


1 
2 
000 
sc 
OMr·1 
000 


AQ 
uww 
000 


QNGPU 
PGNVF 
ITROP 
ERFER 


NNUNM 
MYIDU 
OQZKF 
ClvZNU 


TZNAJ 
IAQUW w ... 


M N 
0 
p 
Q R s 
T u v 
vl 
X 
y z 


G F E 
D c B A z y 
X w v u 
,.,., 
J. 
w v 
[) T s R 
Q 
p 
0 
N 
f.1 
L 
K 
J 
u T s R Q p 
0 
N 
M L K 
r 
I 
H 
t) 


B A z y 
X w v u T s R 
Q 
p 
0 
0 
N 
M L K J I 
H G F E 
D c 3 
z y 
X w v u T s R 
Q_ y _0 
N 
,\~ 


Figure 14-1 ~· Encipherment by arbitrary group length: (U). 


14-i 
CONFIDENTIAL · 


OA:M~Ir'\I:!M ... IAI 
· 


Group length may also be varied, the key of the 
matrix is used for this purpose. For example, assum- 
ing a keyword TRACK, a numeric key of 54123 
can be generated. Thus, the text would be divided 
into groups of 5, 4, 1, 2, and 3 letters, the cycle 


Alphabet Key 
Group Key 
p 
c 


1· 


5 


COMMA 
QEGGS 


2 
4 
DING 


FAVC 


b. The example in figure 14-1 serves to illustrate 
one of the faults of arbitrary group division. In 
theory, \vhen the keying element is kept constant 
and the plaintext groupings are made variable, 
even though the key is used cyclically, external 
periodicity will be suppressed. Note that when the 
plaintext grouping contains similar letters, and when 


the cycle of variable grouping is applied several 


times to the message, periodicity can occur. The 
two occurrences of QUWUG illustrate this point. 
They are separated by an interval of 90 letters; 
their plaintext letters, their group size, and their 
key letters are the same, thus they constitute a 
true periodic repetition. Also of interest is that 30 


groups intervene. Since the length of the key is 6, 
the cycle is repeated 5 times; thus, in the case of 
true periodicity, the interval of 90 is .the product of 


3 
1 
G 
A 


being repeated throughout the message. Encipher- 
ment would then follow the same method of en- 
cipherment as shown in figure 14-1 above, each 
group being enciphered by one alphabet. For 
example: 


4 
2 
EN 
JA 


5 
3 
ERA 


WJA 


6 
5 


LFIRS 
AGDUT 


1 
2 
4 
1 
T A R~I Y 


ZSBG K 


the total number of letters in the key multiplied by 
the number of cycles of the key. 
c. The repetition of ARQN is of another type, 


termed partial periodic to distinguish it from tlw 


former. In this case the interval is 39 lettPrs. It is 


true that this repetition involves similar plaintext 


values IRST, but involves different eyclic group- 


ings. Note also that the points \\·ithin the t\\·o group- 


ings are different. In the first case the repetition 


begins \Vith the first letter of group 3 and ends on 
the first letter of group 4. In the second appearanee 


it commences at the third letter of group 5 and 


ends on group 1. However, it should be obsenced 


that the number of key groups intervening between 


the two repetitions (twelve), is the product of the 


maximum number of key groups (six), multiplied 
by the number of repetitions of the key (two). 


Section II. crz{ SOLUTION OF SIMPLE APERIODIC SYSTEMS 


14-4. J,flS Solution of Numerically Keyed Enci- 
pherment 
a. Solution of numerically keyed encipherment 
follows essentially the same step as that shown in 
the preceding example regardless of whether the 
individual groups are of increasing length through 
the cycle or are irregularly mixed. Initial identifica- 
tion of the system may be somewhat difficult, its 
recognition resting largely on two characteristics. 
First, any uniliteral distribution of the ciphertext 
will be ·relatively flat, similar to a periodic system. 


Second, it may be distinguished from a periodic 
system in that observed repetitions will not factor 
evenly in all cases. Moreover, in a long message 
enciphered by either system there are usually many 
repetitions of both types so that identification might 


hinge on the availability of outside information to 
determine the basic system. 


b. Once the system is recognized, analysis may 


take one of two courses depending upon the alpha- 


bets used. Where the system invoh-es either the use 


of standard cipher alphabets or known mixed cipher 


alphabets produced by the sliding of a mixed com- 
ponent against the normal sequence, solution may 


be accomplished by completing the plain component. 


In such cases bits of plaintext will be found on 
several different generatriees. The number of plnin- 


text letters appearing successively on one generatrix 


is the same as the number enciphered at one setting 
of the numerical key. This is illustrated in figure 
14-2 which shows the completed plnin component 
and its accompanying matrix. 


CANF'IO~NTIAL 
14-3 


468-095 o-n - 14 


CONFIDENTIAL 


c 


p 
Cl 
C2 
C3 
C4 
C5 
c6 


BDKTHCBMJIHVTUBHFSLGFRT 


CELUIDCNKZIWUNCIGTMHGSU 
DFMVJEDOLAJXVODJHUNIHTV 
EGNWKFEPMBKIWPEKIVOJIUW 
FHOXLGFQ!ICLZXQFLJWPKJVX 
GIPIUHGRODMAIRGMKXQLKWY 
HJQZNIHSPENBZSHNLIRMLXZ 
IKRAOJITQFOCATIOMZSNMIA 
JLSBPKJURGPDBUJPN~TONZB 


K M T C Q L K V S H Q E C V K Q 0 B U P 0 A C 
LNUDRMLWTIRFDWLRPCVQPBD 
MOVESNMXUJSGEXMSQDWRQCE 
NPWFTOliiVKTHFINTREXSRD 
0 Q X G U P 0 Z W L U I G Z 0 U S F 1 T S E 
PRIHVQPAXUVJHAPVTGZUTF 
li c 
D 


! 


Numerical Key 
4-3-l-2-6-5 


P 0 I !I T S 


J-\ .c ""' .u .w r 
u o. 
..1.. 
v 
n. 
J...l 
'"J 
~· v 
• 
Ia' •. n 
..., 
"" 
..., 
.. 
.. .... .- 
... 
PIQ RS T U v w XI l: A B C DE FG HI JK L M N 0 
0 p IQ RS T U v w X 1 Z A B C DE FG II I JK LUN 


IJ K L MN OP IQ R S T u v wx 1 z A B C D E F GH 


N 0 PIQ RS T U v w X 1 Z A B C DE F G H I JK LM 
T U v w X 1 Z A B C DE FG HI JK L M N 0 PIQ RS 
S T u v wx 1 z A B C D EF G H IJ K L MN 0 p Q R 


Figure 14-2 (~. Numerically keyed encipherme."~.t, standard 
alphabets ( U). 


c. In the case where the primary components are 
a mix of known and unknown sequences, solution is 
possible through the application of idiomorphism 
and the principles of direct symmetry of position. 
To illustrate the methods involved in this approach, 
the message in figure 14-3 will be used. 
(1) A brief inspection of the ciphertext reveals 
the sequence HZNZHZ, which is significant under 


5 
10 
15 
20 
25 


A 
HZNZH 
ZPDAF 
RZVPB 
XZLCA 
QBOBV 


B 
RBIGH II MAR 
UHBJB 
YTWVX 
RSYHI 


c 
XAKWH 
VHQQE 
IMMXZ 
DDWKG 
YPXFI 


D 
EJFQP 
VUXRV 
ABVGC 
VXQRM 
BXUGB 


E 
LRDDS 
LXBAE 
AFAZQ 
PAVIC 
MBAIW 


F 
KVHQP 


Figure 14-3 #· Aperiodic cipher message (U). 


two conditions. First, the cipher is numerically keyed; 
the possibility exists that this sequence is the product 
of the application of one key, the number of letters 
enciphered corresponding to one setting of the key. 
If this is true, it represents a period of monoalpha- 
betic encipherment and the idiomorphic pattern 


ABCBAB may be used in assuming a plaintext \Yord. 
Second, if a known sequence was used as either 
component, direct symmetry of position can be used. 


Assuming both conditions to exist, a list of idio- 
morphic patterns is searched to locate a word which 
matches the pattern derived .. Among others, the 
word REFERENCE is noted. This is an ideal word 
for opening a message. Then, assuming a standard 
sequence was used for the plain component, the 
following preliminary matri.x may be set down: 


P 
A B C D E F G H I 
J K L M N 0 P Q R S T U V W X Y Z 


c 
z N 


--------- 
··------ 


(2) Thus the above results in the follo"'-ing 


plaintext insertions: 


H 


' 


I 
I 


I 
I 


I 
I 


I 


I 
I 
I 
I 
I 
I 
I 
! 
I 
I 
i 


A 
c 
p 


5 
HZNZH 
REFER 


1 0 
ZPDAF 
ENCE 


RZVPB XZLOA 


Logically REFERE should be expanded to REFER- 


ENCE, thus providing additional equivalencies. The 
problem that arises, however, is the determination 
of the length of the group, i.e. how far does mono- 
alphabeticity extend in this case. A consideration of 


the word itself reveals that it must brenk between 
A6 and A9, for the last Ep value at A9 is Ac and the 
last repeated monoalphabetic bit is Ep=Zc :lt A6. 
A second cipher component, when ~ p= Pc, may be 


inscribed in the matrix: 


14-4 
-CON-=-IDENTIAL 


-GONP'IDEN'fiAL · 


P 
A B C D E F G H I 
J K L M N 0 P Q R S T U V W X Y Z 


C1 
I I I ziNI 
I \ I I I \ I I -~HI 
I I I I 
I 
: 
, 
i 
I 
I 
I 
I 
I 
I 
I 
I 
' 


\---·1-;;I-AI_I.-i--l-1'._1_1 


1-lpl--ll-l.l_i_l_i_l_l_!_l_: __ ! 
C2 


I 
' 
I 
• 
I 
I 
I 
! 
I 
I 
I 


(3) At this point the question of what would 
be the most profitable method of attack must be 
considered. Should we expand the plaintext, or apply 
the principle of direct symmetry of position? Perhaps 
the two can be incorporated. But first, the matrix 
should be examined. Note the occurrence of the Zc 
and Ne in adjacent positions in cipher alphabet 1. If 
the initial word assumption is correct, the cipher 
component is not a standard alphabet. Mixed 
sequences may be derived by decimation, keyword, 
transposition, or by random methods. However, if 
the cipher sequence is keyword mixed, Ze Nc is 
significant in that it may mark the end of the sequence 
and the beginning of the keyword. The letter He 
appearing 12 spaces to the right may represent, in 


this case, a portion of the sequence where alphabetic 
sequencing is resumed; its distance from .Nc makes 


it improbable as a part of the keyword. In any cas<>. 


if each successive secondary cipher alphabet is but a 


different juxtaposition of one basic sequence. thPn 


the principle of direct symmetry of position will 


apply. But to be used, the same letters in S£'\·eral 


alphabets must be found. 
(4) Perhaps such a hit may be diseo,·ered by 
expanding on the assumption of the plain text. The 
assumption of the \vord 
REFERE~CE ,;honld 


lead to the further assumption of the phrase REF- 
ERENCE YOUR :\IESSAGE, or REFEREXCE 


MY MESSAGE. Neither may be right, but they 


are \vorthy of consideration until proven untrue. 


Accordingly, the following muy be inseribPd: 


A 
c 
p 


5 
HZNZH 
REFER 


1 0 


ZPDAF 
ENCEY 


1 5 
RZVPB 


OURME 


2 0 
XZLOA 
SSAGE 


P 
ABCDEFGHIJKLMNOPQRSTUVIIXYZ 


Cl 


C2 


C3 


c4 


C5 


c6 


C7 


C8 


C9 


ClO 


Cll 


Cl2 


Cl3 


Cl4 


Cl5 


Z N 
H 


p 


D 


A 


R 
z 


I , 
v 


p 


B 


X 


z 


L 


c 


A 


Figure 14-4 <fh· Expansion of matrix (U). 


c 
p 
HZNZH 
REFER 


F 


ZjPDAF 
E/NCEY 


Using the equivalencies, the matrix may be ex- 
panded further. However, each letter must tempo- 
rarily occupy a separate horizontal line bec.ause the 
points where the keys are changed are unkno\\·n 


except in the case where SSp=XOc. Thus, the 
matrix would appear as in figure 14-4. 
(5) Several interesting patterns indicative of key 
changes may be observed in the matrix. First is 
the assumed value of Sp for Xc and Zc in alphabets 
11-12. If the assumption is correct. then this is a 
point of key change. Note also that there are four 
values for Ep shown, Zc in alphabet 1, Ac in 4, 
Be in 10, and again Ae in alphabet 15. Thus four 


key changes are indicated in a period of 15 letters. 
one period being a repetition of another in respect 
to the point of juxtaposition. 
~foreover, He in 
alphabet 1 and Vc in alphabet 8 are noted us equal- 
ling Rp. On the basis of these patterns an indication 
of the periods may be shown us follows: 


RZ/V P B 


OU/RME x;z L c A 
S/SAGE 
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It must be understood that this delimitation of 
periods is arbitrary, only serving to limit some 
possibilities and providing a basis for either proving 
or disproving previous assumptions. 
(6) The matrix may now be rearranged in 
order to compare the patterns (fig. 14-5). 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cl 


C2 


C3 


C4 


' 
L 
' ' 


Z N 
H 


D 
A 
PR 
z 
F' 


B 
p 
V X 


A 
c 
z 


Figure 14-5 <!). Matrix reduction (U). 


Examination of alphabet 2 shows the Ze followed by 
Ec, De, and Ae at intervals of 4, 8, and 10 spaces 
respectively. Accepting the Ze as the end of the 
alphabetic sequence, and the space to its right as 
the beginning of the keyword, these values then can 
be inserted into the sequence of alphabet 1 using 
the principle of direct symmetry of position: 


p 
A B C D E F G H I 
J K 
L 
M N 0 
P Q R STU VW X 
Y 
Z 


i 


Cl 
z N 
F 
D 


' 


This leaves the occurrence of the sequence PRe 


as equivalencies of the sequence NOp in alphabet 2 
to be explained. It may be possible that Q is part of 
the keyword, for where else could it appear in light 
of the assumed PRe sequence? This placement is 
unlikely. Therefore, the sequence in this position 
may be incorrect. Moreover, note that the Pe=Np 


equivalency appears in the initial recoqstruction 


matrix prior to the Re=Op equivalency in cipher 
alphabets 2 and 6 respectively. Therefore, they may 
not have been drawn from the same alphabet. In 
this case Qe could have come from a preceding 
alphabet. If so, it would fall prior to He, out of 


I 


I 
I 


I 
I 
I 
I 


A 
HI 
I 
I 


I 
I 
I 
I 
I 


I 


I 
I 
I 
~~- 


sequence except as a part of the keyword. This doPs 


not seem likely, so it may be set aside for the moment. 
(7) The third alphabet may now be considered. 
Four spaces, normally occupied by the letters 


QRSTU, are observed intervening bet\\·een the 
letter Pe and Ve, although no space is noted between 
Vc and Xe, which is usually occupied by the 
~Ve. 


Perhaps the We. and one of the letters RST[' (Q 
being discounted) may be part of the keyword. 


Assuming that in the unknown cipher sequence that 
Xe and Ye will precede Ze, this sequence can be 
incorporated into the sequence thusly: 


P 
ABCDEFGHI JKLMNOPQRSTUVWXYZ 


Cl 


1 


1 
v\xYzN 
F 
DAB 
IHIIi:[P\1' 
I 
I 
I 
I 
' 
' 
I 
I 
I 
I 
I 
I 
I 
' 


By maintaining similar spacing Be may also bP 


placed in its proper position relative to Ae. The 


Pe now falls into proper sequence. 
(8) This leaves only the fourth sequence to be 
fitted, which appears to be quite easy as Ae and 


Zc have been placed. However, when the fitting is 
attempted it will be found that the sequential 
relationships are incorrect. Counting from Ze to 
Lc an interval of 8 is noted, thus placing Lc below 
Mp, in the protosequence, and adjacent to Ae 


below N p, yet Le and Ae are separated by one space 
in the fourth sequence. Referring to the cipht>rtext 


with its assumed plaintext shown in (5) above, it 
is observed that the equivalancies of Le and Ae are 
separated by the Ce= Gp equi\'alency. This in- 
consistency may be explained by another key ehange, 


Ze, Le, and Ce from om' alphabet and Ac from 
another. Accepting this for thP moment. it is found 
they can be fitted, thereby retaining the previously 
established sequence. 
P 
A B C D E F G H I 
J K L M N 0 P Q R S T U V W X Y Z 


Cl 
I 
I PI 
I 
I 
v X y z N 
F 
D L A 
B c 
H 
i 
I 


~-- 
' ~ ~- 
--------------- 
- 
-- - I II I 
I 
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d. With the partially recovered cipher sequence, 
the recovery of the matrix and decipherment of the 
cryptogram may be started. This is a simultaneous 
effort, and the values found are transferred from one 
to the other. First, a matrix which will produce the 
correct plain-to-cipher equivalencies for the as- 
sumed plaintext is constructed. A separate strip is 
prepared for each period of use, as shown in figure 
14-6. Note that in so doing Rc can be placed in the 
third sequence, a value which is immediately trans- 
ferred. Also, because of spacing, Qc is inserted and 
transferred. 


p 
A B C D E F G H I J K L M 3 0 P Q P S T U V W X Y Z 


G Cl 


3 C2 


7 C3 


2 c4 


l.. C5 


Key 


Group 


A 


B 


c 


D 


E 


V X y z N 
D L A B c 
D L A[l c 
H 
LA B C 
H 
D L A B c 


1 
2 
6 


jp~,t 
HZllZll 
REFER 
J:l!CEY 


IIMAR 
UHBJB 


VHQQE 
IMNXZ 


VUXRV 
ABVGC 


LXBAE 
AFAZQ 


F 
D L A B c 
ll 
p Q 
ll 
p 
V X y z N 


p Q R 
V X y z ll 


p Q R 
V X y z il 
F 
!l 
PIQ R 
V X y z il 


3 
4 
5 
7 


**A 6Jmv 
RZVPB 
RBir;H 
OUR!lE 
SSAGE 
OF 


YTFIVX 
RSYI!I 
XAKWH 


:JDWKG 
YPXFI 
EJFQP 


VXQRN 
BXUGB 
LRDDS 


PAVIC 
MBAIW 
KVHQP 


Figure 14-6 y;{. Partial matrix and recoveries of 
plaintext (U). 


R 


F 
F 


[I 


F 


(1) At the fifth period it is discovered that 
further decipherment using the juxtapositions found 
is no longer possible, thus another key change for 
an undetermined period is indicated. In this case 
two sliding strips should be constructed to test the 
assumption of possible 'vords, keeping in mind that 
one juxtaposition will render plaintext for an un- 
determined number of letters. In context with the 
assumed plaintext it seems logical to expect n time 
reference to follow. Accordingly, the words ZERO. 
ONE, or TWO may be assumed. The strips are 
then juxtaposed to produce the required values. If 
the assumption is correct, then all assumed equiva- 


lencies must match. 


P 
A B C D E F G H I 
J 
K L M N 0 P Q R S T U V W X Y Z A B C D 


c 
IDIL!AisfcllniiiiiPIQIRIIJvlxlylziNII IFJoi 


(2) After a short period of experimentation 
the strip above will be found which will produce the 
assumed ZERO plus the letters E-- H. This con- 
firms the ZERO assumption and E-- H possibly 
represents the word EIGHT. Accordingly, the cipher 
values can be inserted in the matrix (fig. 14-7) 
which would now appear as: 


P 
ABCDEFGH!JKL1"t!OPQRSTUV',/XYZ 


G Cl 


3 
C2 


7 
C3 


2 
Cl; 


4 C5 


13 
c6 


V X Y Z !I 
FO 
D L A B C G III 
P Q n 


0 
D L A B C G li I 
PQR 
V X Y Z N 
F 


D L A B C G HI 
p Q R 
vx y z ll 
F 0 


LA B C G li I 
p Q R 
vx y z !I 
F 0 
D 


0 
D L A B C G II I 
PQR 
V X J 
n 
H 
" " 
F 


D L ,A B C G HI 
p Q R 
vx y z ll 
0 


Figure 14-7 (9'). Insertion uf cipher values ( U). 


(3) Observation of the periods used sho'v that 
they are 6-3-7-2-4-8, thus key periods 1 and 5 are 
missing, also possibly 9 and 0. A glance at the cryp- 
togram reveals that the groups I IJLlR UHBJB 


immediately follow that which gives ZERO EIGHT. 
Then, where Tp of EIGHT equals Ic, the second 
Ic must also equal Tp. Therefore, this period could 
be five. In any event, it can quickly be determined 
by alining the two sequences so Ic equnls Tp. In so 
doing, Wp is found to equal Me. The matrix may 
now be transcribed as shown in figure 14-8. 


~"~IP\Pa.l..-1 A I 
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P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


6 Cl 


3 C2 


7 C3 


2 c4 


4 C5 


a c6 


5 C7 


V X Y Z N 
F 0 
D L A B C G HI 
MP Q R 


0 
D L A B C G HI 
MP Q R 
V X Y Z N 
F 


D L A B C G HI 
MP Q R 
V X Y Z N 
F 


L~ B C G HI 
MP QR 
V X Y Z N 
FO 
D 


0 
D L A B C G HI 
MP Q R 
V X Y Z N 
F 


DL A B C G HI 
MP Q R 
V X Y Z N 
0 


V X Y Z N 
F 0 
D L A B C G HI 
MP Q R 


Figure 14-8 </>. Tranacription of matrix (U). 


(4) The values of TTWOZp for IIMARc, 
derived by alphabet C7 above, provide the clue 
that the juxtaposition of the eighth alphabet in the 


Uc of the group UHBJBc must equal Ep to provide 
an E for ZERO. Ho,vever, note that no U placement 
exists for the cipher sequence. Perhaps the U place- 
ment may be inferred by elimination from the 
information at hand. In the sequence 
R - - V 
above, two spaces intervene which should be occupied 
by either S, T, or U. Obviously, one of these must be 
part of the keyword. Considering each vacant space 


in turn, the following letters can be placed. The 


remaining letters are assumed to be part of the 
keyword. This may be observed in the following: 


N 
FO DLABCGHIJKLMPQ 
VXYZ 
E 
R S 
T 
U 
W 


(5) Considered in this light it takes little 
imagination to recognize a probable keyword in 


NEWFOUNDLAND. Accordingly, the values are 
inserted and the matric recovered as shown in 
figure 14-9. Note that a key is recon•red which 
explains the sequence of periods used. 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


6 Cl 


3 
C2 


7 
C3 


2 
c4 


4 
C5 


8 
c6 


5 
C7 


1 
c8 


TV .X y Z N E W F 0 U D LA B C G H IJ KM 


0 u D L A B C G HI J K MP Q R S T V X .Y!z 


U D LA B C G H IJ KM p Q RS T V Xi' Z N 


LA B C G H IJ KM p Q RS TV Xi' Z N. E W 


0 u D L A D C G HI JK MP Q R S T U X .)' z 


U D LA B C GH I J KM p Q RS T V X i' Z N 


S T V X .)' z N E W F 0 u D L A B C G HI JK 


E W FO U D L A B C G ll IJ KM p Q RS T U 


Figure 14-9 </). Recovered matrix ( U). 


p Q R S 


NE WF 


I 
E W FO 


F 0 U D 


N !:.' WF 


E W F 0 


MP Q R 


X i' Z II 


Using this matri..x and the period ::;equence ::;hown, 


further decipherment of the cryptogram is merely a 


cryptographic task. 
e. A very important point is that the solution 
presented above represents but one method which is 
possible only because of the circumstances involved 
in producing the cryptogram. First, the message 
contained a stereotyped beginning. Second, the 
stereotype was discernible in the ciphertext, as the 
initial period of key usage 6-3-7-2 was sufficiently 
long to produce an idiomorphic pattern. Third, the 
use of a standard sequence for the plain component 
and a keyword mixed sequence for the ciphertext 
permitted the use of direct symmetry of position. 
Thus the solution was relatively simple. However, 


had one or more of these factors been different, that 


is, smaller key periods, a different cipher seq uenee 


derived by a more complicated method, or t\\·o 


unknown sequences, the final solution \\·ot!ld hn \·e 


been more difficult if not impossible. A solution is 


possible where the analyst has some prekno\dedge 


concerning the system, its contents, or operation. in 
the case of small samples. Where this knowledge is 


not avajlable with the information presented to this 


point, only one other means of solution is po~sible . 
That is, through the acquisition of sufficient depth, 


so that values can be played against one another. 
This particular technique will be illustrated in :mc- 


ceeding paragraphs. 


14-5. ~ 
Analysis of Variable Length Keying 
Units 
a. The preceding examples dealt "·ith the use of 
variable length plaintext groupings enciphered with 
a constant length key element as one means of 
introducing aperiodicity into a system. Aperiodicity, 


avoiding external periodicity, may also be introduced 


by the reversal of the same techniques, that is. by 


holding the plaintext units constant while applying 


a variable length keying unit. The most common 
method of producing a variable length keying unit, 
where the base keying unit is limited or fixed in 
length, is by irregularly interrupting it. Thus a c;;c\ie 


keying sequence, which would normally produce 


periodic phenomena in the ciphertext. \\·ot!ld now 


introduce an aperiodic element instead. 
b. There are several methods which may be used 


to interrupt a normal cyclic key, all of \\·hich may be 
classified into one of three general types. The type,.; 


are: 
(1) The keying sequence merely stops at ::;orne 
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point in the sequence, succeeding points differing 
irregularly, and resumes at the initial starting point 
after each stop. An example of this encipherment is 
depicted below using the preceding matrix. 


Base Key Sequence 1-2-3-4-5-6-7-8 
Key Element 
1 2 3 4 * 1 2 
3 * 1 2 3 
4 
5 
6 * 1 2 * etc. 
Letter Number 
1 2 3 4 
5 
6 
7 
8 9 10 11 12 13 
14 15 
etc. 
Plaintext 
R E F E 
R E N 
CE.YIY.YIE 
s s 
etc. 
Ciphertext 
HACG 
HAQ 


(2) One or more elements of the base key are 
dropped irregularly during each keying cycle. On the 
completion·of one cycle the base sequence is resumed 


XAPU1tf.B 
I V 
etc. 


again, with different element,.; dropped b.v pre- 


arrangement bet,,·een the eryptographer,;. 
Thi,; 


method is depicted below. 


Base Key Sequence 1-2-3-4-5-6 
Key Element 
2 3 4 5 * 1 2 
5 
Letter Number 
1 2 
3 4 
5 
6 
7 
Plaintext 
R E F E 
R EN 
Ciphertext 
TBHA 
HAP 


(3) The base key sequence is applied to the 
text, alternating irregularly in direction, \Yith or 
without the omission of elements. The base key 


* 1 3 4 
5 6 * 2 
3 
4 * 1 2 ect. 
8 
9 10 11 12 
13 14 15 
etc. 
c E .Yf Y M 
E s s 
etc. 
XBRWP 
A X Z 
etc. 


,.;equence is reapplied in tht:' same mtmner through- 


out the text. The t:'xample behH\- illnstrntl',; this 


method. 


Base Key Sequence 1-2-3-4-5-6-7 
Key Element 
1 2 3 4 
5 * 4 
3 
Letter Number 
1 2 3 4 
5 
6 
7 
Plaintext 
R E F E R 
E :\ 


Ciphertext 
HAC B T 
G Q 


Note that in this method, if no key elements ,,-Pr<' 


omitted and the key sequence was repeatl•d, it 
could be treated as though it was a 16-element k<'y 


sequence rather than an interrupted system. Tlw 


cryptographic effect of it is the same. 


14-6. J.e{Pe~iodic Patterns in Aperiodic Systems 


a. Although a periodicity is introduced in to 
a 


system by this method, certain patterns an• 
!'1'- 


tained which, if recognized, may be exploited for a 


solution. The first of these patterns arises through 


the successive use of the same basic key sequrnct•. 


For example, if the analyst knows the poin h 
of 


interruption, the several cycles of a given mes,.;agt· 


may be stacked upon themselves to produce bits of 
monoalphabetic encipherment. Of course, the longt>r 


the message the greater the size of the bits, and 


* 4. 5 6 7 * 5 4 
3 2 
1 etc. 
8 
9 10 11 
12 13 14 15 16 etc. 


C E .Yf Y- 
~'1 E S s A etc. 
B A P Q 
1V.GXV T etc. 


consequently the more useful thi,.; method is. The 
,;tacking of successive cycles to illnstrntl' thl' bits of 
monoalphabetic encipherrnent is ,.;ho,,-n lwltl\\-. XotP 
the rt'peated cipher letters thn t occur: t•ac h reprP- 
.;pnts the encipherrnent of a single pluintl'xt kttl•r. 


( 1) .Yiethod 1. 
Key Element 
Letter Number 


l'iphcrtext 


2 
3 
4 
1 2 
3 4 
H .-i C G 
5 
6 
7 
HAQ 


5 
6 


8 
9 10 11 12 13 


X .t P C JI B 


- 
I 
s 
,_ 


14 15 16 17 IS 19 20 21 
I V. 
. l't ('. 
22 23 
24 25 26 27 
. l'tl'. 


- 
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(2) Method 2. 
Key Element 
1 2 
3 
4 
5 
6 
Letter Number 
1 2 
3 
4 
Ciphertext 
TBH A 
5 
6 
7 
HA 
p 
8 
9 10 
11 
12 
X 
B R 
w 
p 
13 14 15 . . . etc. 
AXZ 
(3) Method 3. 
Key Element 
1 2 
3 
4 
5 
6 
7 
Letter Number 
1 2 
3 
4 
5 
Ciphertext 
HAGBT 
7 
6 


G Q 
8 
9 10 11 
B A P Q 
16 15 14 13 12 


TVXQ~~ 


Obviously the ability to 8tack suceessi ve sections of 
a message by the successive sections of a keying 
sequence is predicated on the preknowledge of both 
the key sequence and its points of interruption. 
This technique is primarily applicable in those cases 
where past analysis has resulted in the determination 
of the system, its key, and its use. 


b. Other patterns which may occur in systems of 
this type are the familiar idiomorphs. They may 


represent a complete word or a part of a word. 


These patterns arise as a consequence of similar 
portions of plaintext being enciphered by similar 
portions of the keying sequence. Where the point of 
interruption falls on a given word consistently. 
particularly in the case of method 1 above, this 


phenomena is likely to result. For example, note thP 


situation in figur~ 14-10. 


123*1234*123456 ... KEY 


Message A 
p 
R E T 
R EAT 
WILLBE .•• PLAI:I 
c 
G S B 
GSIG 
L W T Y U W •.• CIPHER 


1 2 3 4 5 * 1 * 1 2 3 4 5 6 * 1 . . . KEY 


Message B 
p 
0 U R A T 
T 
A C K W I L 
L ... PLAI:I 
c 
D I Z N M 
I 
Pg__§_JBD 
A ••• CIPHER 


1 2 * 1 1 2 3 4 56* 1 2 3 4 ... KEY 


Message C 
p 
AT 
T A C K 0 N 0 
U R L E . • . PLAn; 
c 
P H 
IPQSBGG 
J F T R • . . CIPHER 


Figure 14-10 (f) .. I diamorphs formed in encipherrnent ( ['). 


Observe that the patterns so produced may be both 
idiomorphic, as 
RETRE 
in the case of the pattern ABCAB for G S B G S in 


message A, or merely repetitions as in thf' ease of 


TACK 


I P Q S in messages B and C. Obviously tlwn, tlw 


usefulness of these is limited by the chance of their 


happening. That is, their production rrst,; upon the 


accidental occurrence of fortunatt• circumstaiH'es. 


c. A more important pattern. in t('!'ms of u:-dul- 


ness to the cryptanalyst, lies in the rt•jwatPcl tJ,.;(• of 


the same starting point in a st-q ll!'lll'l' of hying 


elements in a number of messages. vYhen· thi,.; on·t1rs. 


monoalphabeticity is present in the columns formed 
when a number of messages of the same sy;;u•m an• 
:;uperimposed. Note that the initial sequpnct• of 
keying elements must be constant and that tlw 
m!'ssages superimposPd must all bt• from tlw snnw 
system. Also, the greater the ch•pth. tlw rnon• pro- 


nounced the monoalphabeticity Pxhibitt'd by l'ach 
\'olumn. This is particularly applicnhlP in t lw cn,.;t• 


f)f ,.;hort messages, because t ht• num b(•r of nH',.;,.;ag~•,.;. 
not th(•ir length, is the important critPria 11"!H'Il all 
f)ther factors arc constant. To ob,.;en·p tlw ,.;ignifi- 
('tmn· of this, note the superimposed me,.;sag('S and 
thP frPqtwncy distribution derived from the first 10 


('()lumns so formed in figure 14-11. 
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Hess age 
Letter Number 
Hess age 
Letter Humber 
No. 
No. 


1 1 1 1 1 
1 1 1 1 1 
1 2 3 4 5 6 7 8 9 0 1 2 3 4 
1 2 3 4 5 6 7 8 9 0 1 2 3 4 
1 
Z C T P Z W Z P E P Z Q X 
19 
A F E 0 J T D T I T 
2 
W1'EQNXZSYSPRC 
20 
KPVPQWPKTEV 


3 
TCR-WCXTBHH 
21 
Z A B G R T X P U Q X 
4 
E F ·J{ C S Z R I H A 
22 
YHEOCUHMIJT 


5 
YANCIHZNUW 
23 
CLCPZIKOTH 


6 
VZIE'l'IRRGX 
24 
A F L W W Z Q M D T 
7 
H C Q I C K G U 0 N 
2) 
ZCWAPMBSAWL 


8 
Z C F C L X R K Q W 
26 
HFLMHRZIIAPECE 


9 
HWWPTEWCIMJS 
27 
CLZGEJ.:KZTO 
10 
EPDOZCLIKSJ 
28 
T P Y F K 0 T I Z U H 


11 
WTSSQZPZIET 
. 29 
Z C C P S N E 0 P H D Y L 
12 
Z C G G Y F C S B G 
30 
C I Y G I F T S Y T L E 
13 
CWZAOOEMHWTP 
31 
YTSVWVDGHPGUZ 


14 
CIYGIFBDTVX 
32 
NOCAIFt3JBLGliY 


15 
EAQDRDNSRCAPDT 
33 
ZXXFLFEGJL 


16 
Y F W C Q Q B Z C W C 
34 
ZCT!1MBZJOO 


17 
WTEZQSKUHC 
35 
H C Q I W S Y S B P H C Z V 
18 
Z C V X Q Z K Z Y D W L K 


Letter Number 


1. 


2. 


3. 


4. 


5. 


6. 


7. 


8. 


9. 


10. 


~ = 
-- 
=~ 
ABCDEFGHIJXLMNOPQRSTUVWXYZ 


::::::5 


~ 
- 
~ 
~ -= 
- 
-- 
- 
ABCDEFGHIJKLMNOPQRSTU V Y X Y Z 


-=-=-- 
=-== ====-==-= 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


== 
==--=== 
==-- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


~ - 
-~--=~ --~===---~ ~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


----~ -= - 
=-= --==--=~ ~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


==--== 
=-== = 
---~ 
ABCDEFGHIJKLMhOPQRSTUVWXYZ 


==-= 
-~-= 
---- 
---- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


==-=- 
_jie;;;;;: __ 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


=-= -= 
=--==- 
==--~- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Figure 14-11 )125. Frequency distribution columns 1-10 (U). 
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(1) The first and second distributions are 
certainly monoalphabetic. The peaks and troughs 
are pronounced, and the number of blanks, con- 
sidering the size of the samples, corresponds with 
that expected. But note that the same pattern is 
lost in the remaining alphabets. This may be ex- 
plained by a change in the successive points of 
interruption. 
(2) Assuming that the first, second, and pos- 
sibly third columns are monoalphabetic, the pos- 
sibility of an entry is provided, based upon the 
assumption of probable words. Recall that most 
military messages are prone to stereotypes, particu- 
larly in beginnings and endings. Thus words such as 
REFERENCE, REFER, REQUEST, ENEMY, 
IN, etc., are commonly found. High-frequency di- 
graphs used in the initial portions of common words 
are observable in the first two or three columns. For 
example, in the first two columns above, the follow- 
ing digraphs can be found: 


Z C-7 
WT-3 


C I -2 
AF-2 


HC-2 
C L-2 


14-7. ¢ Interruptions 


a. To this point, only the results of thf' keying- 
sequence interruption have been discussPd. 
X o 
mention has been made of that element which detPr- 


mines how the interruption takes plact-. For this 


purpose, either a letter of the ciphertext or of tlw 


plaintext may be used, the exact letter being agreed 
upon in advance. Since there is nothing fixed rt-lative 


to the time of interruption, it will appear quitr 


irregularly, exhibiting no distinctive pattern or 
cyclic periodicity. Whether thr letter itself is a 


ciphertext or plaintext letter is of no importance. 
Interruption, in the case of a plaintext letter, takes 
place after that letter is enciphered. In the case of 
a ciphertext letter, the interruption occurs aftt-r the 


selected letter is produced by the enciphering 


process. 
b. The source of the letter selected for use as an 
interrupter letter is significant in that it may hn n 


a direct bearing on the solution of a cryptog-ram. 


This may be seen in figure 14-12 wherr the interrupter 
is a plaintext letter. 


Key-----B U S I N E S S M A C H ~ 
B U ~ 
B U S ~-B U S I H ~ 
Plain---A M M U N I T I 0 N F 0 
F I 
S T A 
T I L L E 


Cipher--S 0 L Y R P J D R 0 J K X K J F Y X S X D J U P S Y 


Key-----B U S I N E S S M A C H I N E S B ~ 
B U S I N E S S 1·1 A C H ~ 
Plain---Y W I L L B E L 0 A D E D A F T E 
A H M U N I T I 0 N F 0 R 
Cipher--I Y D P Y F X U R A F A E N M J J V B 0 L Y R P J D R 0 J K X 


Key-----B U S~B U~B US I U~B US IN 
Plain---T H I R D A 
T I L L E R Y 


Cipher--D G D X G U F D J U P S Y I 


Cryptogram 


BOLYR 
PJDRO 
JKXKJ 
FYXSX 
DJUPS 
YIYDP 
YFXUR 
AFAEN 
MJJVB 
OLYRP 
JDROJ 
KXDGD 
XGUFD 
JUPSY 
IXXXX 
@ Interrupter letter 


p 
A 
B c 
D 
E 
F 
G 
H 
I 
J 
K 
L 
H 
H 
0 
p 
Q 
R s 
T 
u v 


c 1 
B E F G J 
K M 
iV 
0 
p 
Q s 
'1' v w X z H 
y 
lJ 
R 
11 


2 u L I c B E F G J 
K M N 0 
p 
Q s T v w X z H 
3 s 
T v w X z H 
y 
D R 
A u L I 
c B 
/!,' 
t' 
(j 
.; 
K 
M 


4 
I 
c B E F G J K M N 0 
p 
Q s T 
v w X z !i 
y 
D 
5 N 0 
p 
Q s 
T v w X z H 
'( 
D R A u L 
I 
c 
13 
E F 
6 E F G J K M N 0 
p 
Q s T v rl X z Ii 
y 
D 
R 
A u 


7 
M 
N u 
p 
Q s 
1.' 
v w X z H y 
D 
H A u L I 
c B E 


tj A u L 
I 
c B E F G J K M N 0 
p 
Q s T 
v w X 
<:; 


9 c B E F 
G J K M N 0 
p 
Q s T v w X z II 
y 
D R 


10 
H 
y 
D R A u L 
I 
c B E F G J K M N 
0 
p 
Q s 
T 


" 
-· .. '-· 
--··- 


Figure 14-11! <¢>. Plaintext letter as interrupter (U). 
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w X y I z I 


u L 
I 
c 


y 
iJ 
F. 
"' 
I 
N 
() 
pi~ : 


lr 
A 
u· 
"' 
G ,j 
K 
.'1 


L 
1 
(..., : d 


F G .; 
K 


H 
y 
D 
P. 
A u 
r 
I 
L 
v w v - 
'-' 
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(1) In this example, the plaintext letter R 


\Vas selected as the interrupter letter. Each time 
Rp appears, the key is changed following its encipher- 
ment, then the key reverts to its initial starting 
point. As a consequence of using a high-frequency 
letter, repetitions will occur quite often. This is 
true because a high-frequency letter \'f-ill be a part 
of many common words, because it '"ill be followed 
quite often by the same letter, and also because 
the word in which it appears may be followed by 
words that are frequently repeated. Thus each time 
the word ARTILLERY appears in the plaintext, 
the cipher equivalents of TILLERY must be the 
same because the key sequence reverts to its initial 
position following the encipherment of the R. 
If a low-frequency letter was selected as a plaintext 
interrupter, then each cycle of key usage would be 
greatly extended, resulting in an approximation of 
periodic substitution with the probability of numerous 
repetitions. 
(2) Although the length of the intervals between 
repetitions in any of the foregoing cases would be 
irregular, thus suppressing periodicity, the length 


of each interval is normally sufficient to permit 
solution by two genera!" methods. First, if the cipher 
alphabets are known from the results of prior 
analysis, and the cryptogram to be deciphered 
merely represents a key change, solution ,,·ould be 
possible through the probable-word method. Second, 


repetitions found in the text would be examined in 
the light of their presence being due to a stereotype 
word. A probable word, then selected, would be 
applied in successive juxtaposition to the cipher- 
text. Using the known sequences, a key letter for 
each letter of the probable word would be derived. 


The process would be continued until such time as an 
intelligible key sequence was found or the probable 
word disproved. In the latter case, a different 
probable word would be assumed and the same 
process repeated. 
c. In the example above, a plaintext letter served 


as the interrupter letter. But suppose the corre- 
spondents had agreed upon a ciphertext letter instead. 
In this case the same message, using the same key 
and cipher sequences, would now appear as shown 
in figure 14-13. 


Key-------B U S I N E S S r.~ A C H I N E S B U S I N E S S H 


Plain-----A M M U N I T I 0 N F 0 R F I R S T A R T I L L E 
Cipher----B 0 L 1 R P J D R 0 J K X T P F 1 X S X B P U U@ 


Key-------B U S I N E S S M A C H I N B U S I N E S S M A C H B U 


Plain-----R Y W I L L B E L 0 A D E D A F T E R A M M U N I T I 0 


Cipher----H R N M 1 '1' T X H P C R F @ B E J F I E L L B 0 N @ 0 @ 


Key-------B U S I N E S S H A C H B U S I N E 


Plain-----N F 0 R T H I R D A R T I L L E R Y 
Cipher----V E C X B 0 D F P A Z @ 0 N U F I 
C 


BOL1R 
PJDRO 


TTXHP 
CRFQB 


FPAZQ 
ONUFI 


~ = Interrupter letter 


Cryptogram 


J K X T P 


EJFIE 


C X X X X 


F 1 X S X 
L L B 0 N 
B P U U Q 
Q 0 Q V E 


Figure 14-13 <.p{ Cipher letter as interrupter (U). 


HRN/11 
C X B 0 D 


Note that in this example there are no significant 
repetitions. This is due only to the selection of Qc 
as the interrupter. Had another letter been chosen, 


repetitions might have been plentiful. For example, 


note the repetitions occurring in the messngt- sh0\n1 


in figure 14-14 when Sc is used as nn interrupter. 


r.n N I='" IF\~ I\ITI1l 1---... 
14-13 


-CONFIDENTIAL 


Key-------B A N D S B A N D S B A N D S B A N D S B A~I B A N D S B A N D S B 
Plain-----F R 0 M F 0 U R F I V E T 0 F 0 U R F I F T E E N A M B A R R A G E 
Cipher----K T A K Z W X I I D A C B N Z W X I I D K W S J 0 N K T B T I D H J 


~ 
= Interrupter letter 


P 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Cl 
C2 
C3 
C4 
C5 


B 
A 
N 
D 
s 


E u 


0 


R 
T 


F 
L 
p 
A v 


G 
J 
K 
I c B 
Q s T 
u L 
I 
w X z 


M N 
0 
p 
Q s T 
E 
F 
G 
J 
K 
M N 
v w X z H 
y D 
c B 
E 
F 
G J 
K 
H 
y 
D R 
A u L 


v w X 
,., 
H 
y 
D 
R 
A u L 
I c 
iJ 
0 
p 
Q s T v w X z !I 
y 
D R 
R 
A u L 
I c B 
E 
F 
G J 
K 
M 


M N 
0 
p 
Q s T v w X z H 
y 
I c B 
E 
F 
G J 
K u N 
0 
p 
Q 


Figure 14-14 yn. Repetitions as a result of interrupter letter encipherment ( U). 


(1) This last example provides a clue which 
may be used as an entry. Note that in this case the 
key is short, thus the key sequence is repeated 
several times before being interrupted. This of itself 
provides the possibility of repeated segments between 
periods of interruption. In such cases as above, where 
cipher repeats appear closely, the intervening letters 
between repeats may be eliminated from considera- 


tion as interrupter letters. Thus Ac, Cc, Be, and Nc 
may be eliminated from consideration. 
(2) Insofar as analysis is concerned, two possi- 


. bilities are presented: superimposition or dirent 


attack. In the first case, if the interrupter can be 
identified, the message may be divided into segments, 
each representing a key sequence run, and stacked 
as shown previously, the columns so formed being 
monoalphabetic. One difference in respect to the use 
of probable words should be noted. In cases similar 
to this, the analyst works from the inside of the 
message. That is, he attempts to find a given word 
in the body of the message. This is a much more 
difficult task than attacking the beginning of a 


message. This of course applies only to the case of 
stacking one message upon itself. Should depth of 


30 to 40 messages of the same system and key be 
available, this system can be solved more readily by 
superimposition. In the second case, a direct attack 


upon an individual message is possible, but unless it 
contains some inconsistency in its text it can be a 


very difficult problem. 


14-8. (/.) Solution by Superimposition 
a. As mentioned previously in the case of both 
numerically keyed and interrupter-letter encipher- 


ment, solution is best accomplished by superimposi- 


tion which requires a depth of messages kno\nl to bP 


from the same system. The solution \Yill be made 


easier if the analyst has some preknowledgc concern- 


ing the possible contents of the· message. Hen• tlw 


knowledge of common stereotyped beginnings is 
invaluable. The general techniques used in this 


approach are demonstrated in the follo,,·ing- para- 


graphs. 


b. The first two or three groups constituting thP 


beginning of the message are selected from messages 


produced by the same system, superimpos~·d to form 
a column. A uniliteral frequency distribution is 


made of these columns. Normally only tlw first t\\·o 


or three columns are so treated, because it is assumed 


that beyond this point the usc of an interrupter in 


some of thP messages \Yill destroy columnar rnnno- 


alphabeticity. This process is demonstrated in 
figure 14-15. 
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1. 
TQPFYINGCRFKEXC 


2. 
I G X P J C T R F K E X G F W 
3. 
S Q E Q X E T E T I R A X D X 
4. 
M G Q D F P N Z Y M 0 R T Y T 
5. 
T Q P P X C F N E T I N Q X P 


6. 
F U A B M R H .z K T C G D T S 


7. 
K B Y T D ·H C K H T M G J R Z 


8. 
I U E R B G K Q D A P P Z Q A 
9. 
I G Y I X G X P Y Z K Q X Q R 


10 • 
T Q C F T B R I U W Q E Z U Y 


11. 
T Q B Z B Z F K F Z Z T I R A 


U. 
PQALATKQDFPNZYM 


13. 
D G S B J I B M K B Q A T S B 
14 • 
T Q M P 0 N L Q 0 G Z Q D F P 


15 • 
I G X B J G L N Y Z Z E L A G 
16. 
G H N H H M K T S N B X L R Z 
U. 
CHMFTIRAXDXDNNF 


W. 
IGYIRGCNHAEFUGI 


19. 


20. 


21. 
22. 
23. 
24. 
25. 
26. 
27. 
28. 
29. 


30. 


31. 
32. 
33. 
34. 
35. 


Column Number 1 


W '1' R N C N f,i H E Y U A H H K 


VDNEFAYZKQXCMFT 
TQCPFYAEQDDTRNC 
Z G I U Y L R X G F I T 0 0 D 
K R W '1' S P U Z E D M G I N J 


TQBZXAUSPBFRMDX 
TQXCFOLYGDJTBVF 
IGXSNGMAYZOZFTQ 
KBYPSYQEXSDYIRG 
GXCPCJFOOJNIARA 
FDDYSDYIRGCJLME 
DQRYHRHZKTCGDTR 
CHAPQGAZEMGQDFP 
KDALKJLUSLPWQDK 
KSHGROJNQZNHOQA 
SQPFXRJGARLZBCW 
TQMPOAQFMLZYWFP 


;E 
~ - 
- 
=~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Column Humber 2_ 


~ 


~- 
- 
~---- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Column Number 3 


--- 
- 
----- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


TQP 2 


TQC 2 
TQB 2 
TQM 2 
TQX 1 


IGX 3 


IGY 2 
TQ 9 
IG 5 


Figure 14-15 (~. Frequency distribution and polygraphs of superimposed columns (U). 


c. The distribution derived from the first three 
trigraphs and digraphs observed may be examined 


columns exhibits several interesting characteristics. 
for possible stereotype words. 


Note that the first distribution shows a pattern 
(1) The repeated TQc digraph follo\Yed an 
similar to that expected for a rnonoalphabetic 
equal number of times by Pc, Cc, De, and Me is 


distribution, but that the second has two peaks 
characteristic of the <ligraph REp in t.ypicul mes- 


which seem abnormally high. These two peaks 
sage beginnings, such as REQUEST, REFER- 
probably represent two vowels. The third distribu- 
ENCE, REFER, RECEIPT, RECO::\DlE~D, etc., 
tion is somewhat flatter than the first. This may be 
and provides a ready point for initial n::>:mmptions. 


the result of a key change occurring in several of 
The only problem is associating the correct word 
the messages included in the distribution at this 
with the correct digraph. In some instances the 
point. Considering these possibilities, the repeated 
frequency of individual patterns compared to the 
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expected frequency of digraphs and trigraphs may 
provide a clue. In others such as this, where similar 
frequencies are involved, final resolution is merely 
a matter of trial and error. With this in mind and 
accepting that TQc is REp, the following associations 
are arbitrarily made. 
P 
REC 
REP 
REQ 
REF 


C 
TQP TQG 
TQB. TQM 
(2) Using the assumed equivalencies and as- 
suming that the plain component is a direct stand- 
ard alphabet, a matrix may now be set up as follows 
(fig. 14-16). 


p 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Cl 


III.II·IJ IIIIIIIIIJITIIIIIIIII 


C2 


C3 


Figure 14-18 (C). Initial placement of values (U). 


(3) The assumed values for the third alphabet 
1. c TQPFYINGCRFKEXC 


p 
R E C 
2. c IGXPJCTRFKEXGFW 


p c 0 u 
3. c SQEQXETETIRAXDX 


p 
S E N 
4. c MGQDFPNZYMORTYT 


p 
Y 0 B 
5. c TQPPXCFNETINQXP 


p 
R E C 
6. c FMABMRHZKTCGDTS 


p 
F I R 
T 
7. c KBYTDHCKHTMGJRZ 


p 
AT T 
8. c IUERBGKQDAPPZQA 


p 
C A N 
9. c IGYIXGXPYZKQXQR 


p 
C 0 T 


10. c TQCFTBRIUWQEZUY 


p 
R E P 


11. c TQBZBZFKFZZTIRA 


p 
R E Q 
12. c PQALATKQDFPNZYM 


p 
V E R 
13. c DGSBJIBMKBQATSB 
p 
H 0 Z 
14. c TQMPONLQOGZQDFP 


p 
R E F 
15. c I G X B J G L N Y Z Z E L A G 
p c 0 u 
16. c GHNHHMKTSNBXLRZ 


p 
E N E 
17. c CHMFTIRAXDXDNNF 


p 
I N F 
18. c IGYIRGCNHAEFUGI 


p 
C 0 T 


reveal two distinctive patterns that indicate the 
type alphabet involved. Note that Rc-- 1.\fc and 


CBc are in reverse order, and also that the values 
involved are reciprocal, that is Cp=Pc and Pp=Cc. 
As the two patterns are characteristic of a reversed 
standard alphabet, this configuration is inserted in 
all three cipher sequences (fig. 14-17). The assump- 
tion being that, as in most cases, the secondary 
sequences arc derived from the successive j uxtu- 
position of two basic sequences. 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cl 
KJ IB GF ED C B A Z y X w v U T SR Q p 0 N M L 


C2 
U T SR QP ON ML KJ IH GF E D CB A Z y X w v 


C3 
RQ PO NM L K J I H G FE D C B A z y X W v u T S 


Figure 14-17 (C). Campletion of assumed sequences ( U). 


(4) Using this matrix, the first three columns 
of each message beginning are now deciphered as 


shown in figure 14-18. 
19. c WTRNCNMHEYUAHHK 


p 
0 B A 


20. c VDNEFAYZKQXCMFT 


p 
P R E 
21. c TQCPFYAEQDDTRNC 


p REP 
22. c Z G I U Y L R X G F I T 0 0 D 
p 
L 0 J 


23. c KRWTSPUZEDMGINJ 


p 
AD V 


24. c TQBZXAUSPBFRMDX 


p 
R E Q 
25. c TQXCFOLYGDJTBVF 


p 
R E U 


26. c IGXSNGMAYZOZFTQ 


p c 0 u 
27. c KBYPSYQEXSDYIRG 


p AT T 
28. c GXCPCJFOOJNIARA 


p 
E X P 


29. c FDDYSDYIRGCJLME' 


p 
F R 0 
30. c DQRYHRHZK'.fCGDTR 


p HE A 
31. c CHAPQGAZEMGQDFP 
p 
I N R 
32. c KDALKJLMSLPWQDK 
p 
A R R 
33. c K S H G R 0 J N Q Z N H 0 Q A 
p A C K 
34. c SQPFXRJGARLZBCW 


p 
S E C 
35. c TQMPOAQFMLZYWFP 


p 
R E F 


Fi(J'Ure 14-18 <f)· Insertion of plaintext values (U}. 
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(5) Several of the trigraphs so produced ean 
easily be expanded to full words. Among these arc: 


REC 
RECOMMEND or RECEIVE 


FIR 
FIRST 


ATT 
ATTACK or ATTENTION 
CAN CANCEL 


REQ 
REQUEST or REQUIRE 


COU COUNTER 


ENE 
ENE~IY 


INF 
INFANTRY or INFORMATION 
Other trigraphs seem to be impossible combinations 


of letters. Among these are: 


YOB 
OBA 
COT 
LOJ 
HOZ 
INR 


This may be Pxplairwd by a 1wriod of interruption 


occurring somewh0rc in th<' first t\\·o positions of 
these messag<'s. In rPspPet to this, note that, ,,·ith 


the exception of INR, the letter "0" is common to 
all. 
(6) To test the possibility of n key 
change 
being irwolvcd, a fourth ciplwr spqut>Jl<'<' for tho,;<> 
S<'Pmingly good trigraphs ean lw <·onstrndPd. Tlw 


equivalencies thus established then \·an be testPd 


against those which seem improbnbk. If the tetra- 


graphs produced seem illogical, tt kPy ehangc may 


be assumed. Thus the following is produced: 


p 
A B C D E F G H I 
J K L M N 0 
p Q R s T U V W X y z 


C4 


! 
s I 
R Q I 
P o N I~ L I xH I H 
a H 
E I 
~lj 
B l.t z r x. w 1· 
lr 
c 


I 


Using this sequl'nc<', th0 trigraphs assumPd to be 
good may no"· be expanded to: 


1. c 
TQPF 
7. c 
KBYT 
p 
RECO 
p 
ATTA 


2. c 
IGXP 
8. c 
IUER 


p 
COUE 
p 
CANC 


3. c 
SQEQ. 
16. c 
GHNH 
p 
SEND 
p 
ENEN 
6. c 
FMAB 
17. c 
OHMF 


p 
FIRS 
p 
INFO 


(7) Each of the tetragraphs produced by this 
seq uencc conforms to tlw words assnm0d, with the 
exception of number 2. But note again that the 0 


appears as plaintext. Morcov0r the t->amc sequ<'IH'e 


applied to th<' improbable trigraphs now producPs 


the follmving: 
YOBQ 
COTL 
HOZS 
OBAG 
LOJZ 


INRE 


Thus a key change is indicated, and sine<' 0 appt>ars 


in all except INRE, \Yhich no\\· appears to bP two 


words (IN RE), it may be tentatively acc('ptPd as the 
interrupter ll'ttl'r. This bPing the ease, the obvious 


step is to confirm this assumption by trying to 
decipher these groups that revert back to cipher 


s<'qU<'ncP 1 <'tH'h time the> Op app0nrs. Doing this. ,,-p 


find that th<' questionnblt' groups no\Y producP: 


2. c IGXP 
19. c WTRN 


p 
CONF 
p 
ORDE 


* 
* 
4. 
C. MG QD 
22. c ZGIU 


p 
YOUR 
p 
LOCA 


* 
* 
9. c IGYJ 
31. c CHAP 


p 
COMM 
p 
IXRE 


(8) Th<' npp<'arnncP of \·nlid plaintext <·onfirm,; 
th<' assumption of Op ns tlw interruptPr kttPr. Tlw 
final solution is no\\" quite ,;implt>. 
Knm,·in~ tlw 
spqu<'HCP of th<' ciplwr nnd plain corn ponPn h. n nd 


having identifi<'d tlw int0rrupter ktt<>r. all that 
r0mnins to reconstruct th<' systpm i,; to dPtt>rmiiH' 
tlw numbf•r of nlphabPts irl\·oln•d tllld tlwir rp,;pec- 
th-e juxtapositions. This cnn bP doJH' by ,;deeting orw 


or mor<' m0ssages in ,,-hieh tlw probably \\·onl or 
words <·ontnin no 0 and juxtaposing t lw spq tH'IIt'PS 


to produel' thP known ciphf•rtt>xt. vVJwn the point,; 


of juxtaposition rl'p<'nt, tlw full kl'Y kngth is rt>pro- 
duced. Thus, t.hc mntrix ,;j;-;p is dPtPrrnirwd. For 


example: 


6. 
F M A B M R H Z K T C G D T S 


F I R S T A R T I L L E R Y 
7. 
K B Y T D H 0 
ATTACK 


8. 
I U E R B G K 


CANCELL 


14. 
T Q M P 0 N L Q 0 


R E F E R E N C E 
Key 
K U R T F R Y S S E N I K U R 
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The matrix may now be reconstructed as shown in 
figure 14-19, and each message deciphered. 


P 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cl 


C2 


C3 


c4 


C5 


c6 


C7 


c8 


C9 


ClO 


Cll 


KJ 


U T 


R Q 


TS 


FE 


RQ 


1X 


SR 


S R 


ED 


NM 


I H G F ED C B A Z y X w v U T S R Q p 


SR QP 0 N ML KJ I H GF ED C B A Z 


p 0 NM L K J I H G FE D C B A z 1 X W 


R Q p 0 NM L K J I H G FE D C B A z 1 


DC B A z 1 xw v u TS RQ p 0 NM L K 


p 0 NM L K JI HG FE DC B A z 1 X W 


w v UT S R QP 0 N ML KJ I H GF ED 


Q p 0 N f.fL KJ I H G F ED C B A Z 1X 


Q p 0 N ML K J IH GF E D C B A Z y X 


C B A Z 1X w v U T S R QP 0 N M L KJ 


L K JI H G FE DC B A z y X W v u T S 


Figure 14-19 <f). CtYmpletion of matrix (U). 
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PART SIX<¢ 


INTRODUCTORY CODE SYSTEMS 


CHAPTER 15 (~) 


CODE SYSTEMS 


Section I. <¢> INTRODUCTION 


15-1. (~) Classification of Code Systems 


Codes differ from ciphers in two respects. First, a 
group of symbols (letters, numbers, or a mixture of 
both) is used to represent a letter, syllable, word, 
phrase, or sentence of plaintext. Second, as they are 
not generated by an enciphering process, they do 
not bear the same relationship to the structure of 
the underlying plaintext as does a cipher. As code 
systems are arbitrary in nature, each group having 
its own assigned value, they require the use of books, 
lists, charts, .etc., to tabulate the codes and their 


meani~gs. Codes may be classified by the number 
and type of documents used. 
a. Open codes are systems of disguised secret 
writing in which units of normal plaintext are used 
as the code equivalent for letters, numbers, words, 
etc., of the plaintext message. They can be, and 
often are, combined to form an intelligible text of 
an apparently innocent message. An example of 
such an open code message is the poem passed by 


BBC on 1 June 1944 warning the French undt>r- 


ground that the invasion of France was to bt> 


launched in less than 2 weeks: 


LES SANGLOTS LONGS 
DES VIOLONS 


DE L'AUTOMNE 


Another example is the following message passed to 
Secretary of War Stimson at the Potsdam Confer- 


ence to advise him of the success of the explosion of 
the first atomic bomb at Alamogordo, New :\iexico. 


DOCTOR HAS JUST RETURNED MOST EN- 
THUSIASTIC AND CONFIDENT THAT THE 
LITTLE BOY IS AS HUSKY AS HIS BIG 
BROTHER. THE LIGHT IN HISEYES DIS- 
CERNIBLE FROM HERE TO HIGHH<)f]) 


AND COULD HAVE HEARD HIS SCREA~IS 
FR0}.1 HERE TO .MY FAR~L - 
--- 
The BIG BROTHER referrPd to in thP prPct>ding 


message is the atomic bomb droppPd on Hiro~himn 


on 6 August 1945. 
b. Book codes are code systems in which the eode 


groups are contained in bound documents, arranged 


in some systematic order. They may be classified a:-; 


either one- or two-part codes. 
(1) A one-part code is a code in which the 
plaintext element and its corresponding code group 


are contained in one document, arranged in alpha- 


betic, numeric, or other systemtltic order. This is an 


example of a one-part code: 


165 
GAS ALERT OFF 


166 
GAS ALERT ON 


167 
GAS ATTACK READY 
168 
GAS HAS BEEN RELEASED 


169 
GAS HAS BLOWN BACK 


170 
GAS HAS CEASED TO BE RELEASED 


171 
GAS WILL BE RELEASED AT (TniE) 


(2) A two-part cod£' is a randomized code 


sy~tem consisting of an encoding book nnd a decoding 
book, or sections of either. In the encoding book or 


,;potion, the plaintext equivalents ar£' arranged in 
alphabetical or numerical order, th£' code groups 
being assigned at random. In the decoding section 
or book, the code groups are arranged in a systematic 
order, alphabetical or numerical, and are accompa- 


nied by their meanings as giVPn in the encoding 


~ection. The significant difference between two-part 
codes and one-part codes is that, in the former. the 
sequential relationship between codc groups and 


plaintext does not exist. For cxamp!P, compare the 
two-part code shown in figure 15-1 with the one-part 
code above. 
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468-095 o-n- t5 


~ANI="IAI="NTIAI 


ENCODING SECTION 


W E I P 2583 
Intercept ing ion or s 
F I P I 
0514 
Key s 
X I G L 2756 - station 
C U F Z 0255 
Ki 
K A X P 1072 Intercepted 
K A K B 1059 Kill ing s 
R 0 T B 2043 
Interdict ing ion s 
F Y V M 0595 
Killed 
W 0 G L 2631 Interdicted 
C I Q M 0215 
Kilocycle s 
Q 0 p y 
1889 Interfere ing nee s (in) 
H 0 D U 0828 
Kilometer s 
G A V Q 0620 Interfered (in) (with) 
V Y R U 2541 
Kind s (of) 
X A X D 2722 
Intermediate 
G Y K Z 0734 
Kitchen s 
H I Z R 0824 
Internli ttent l;t 
N 0 P A 1589 
Knew 
B 0 G C 0081 Interpreter s 
Q A G T 1806 
Knot s 
Z E I N 2883 
Interrogate ing ion s 
Q Y X E 1947 
Know ing s 
LA V M 1220 Interrupt ing ion s 
K Y T F 1193 Knowledge (of) 


MY E P 1479 Interrupted 
L Y X I 
1347 
Known 
H A rvt F 0761 Intersect ing ion s 
F I K D 0509 
Ko 
Z U S T 2967 
Interval s (of) 
M 0 K W 1434 
Ku 


DECODING SECTION 


HALE 0760 
Few 
H I G H 0815 
Meteorological 


M F 
61 
Intersect ing ion s 
R I 
16 
Allowance s (for) 


H G 
62 
Short ly 
S K 
17 
Demoralize ation ing s 


0 H 
63 
Circular s 
T L 
18 Presence (of) 
p I 
64 
u 
U M 
19 Altogether 


HAQK 0765 
Centimeter s 
H I V H 0820 
uss 
R L 
66 
Repulse ing s 
w 0 
21 
Release ing s 


S H 
67 
Your message (No.) 
X p 
22 
Fi 
T N 
68 
Assembly point s 
y Q 
23 
Well 
u 0 
69 
Runner s 
Z R 
24 
Intermittent l;t 


H A V P 0770 Air base s 
H 0 A R 0825 
Strengthened 
w Q 
71 
River s 
B S 
26 
Often 


X R 
72 
r-1a.sk ing s 
C T 
27 
Void 


y s 
73 Built 
D U 
28 
Kilometer s 
Z T 
74 
Gain ing s 
E V 
29 
Favorable y 


Figure 15-1 )Y1· Tu·o-part code (U). 


1 5-2. ~Matrix Codes 


a. Matri"< codes as a class represent a trans1t10n 


between cipher and code systems. They may rangP 


from simple syllabary squares correctly classed as 


ciphers to code charts which include a small vocabu- 
lary of \vords and phrases. Generally, matrix cmlt>s 


follow closely the cryptographic principles of multi- 
literal systems treated previously. They differ from 
cipher systems primarily in their construction. In 


cipher systems, excepting the monome-dinome and 


nwnome-dinome-trinome systems. thr ratio bt>tween 
plain and cipher elements is nearly constant. ~[atrix 
coJrs. however, have no definite ratio. ~uhstitution 


of values may involve constant-length codr groups 
for nuiable-length plaintext units eomposrd of a 
mixture of letters, syllables, words, phrases, or 
sentences. An example of a typical matrix eoJe is 
shown in figure 15-2. 
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38 
39 
40 
41 
42 


2b 
A 
ADVANCE 
AMMO 
AN 
AND 


26' 
CA 
CALIBER 
co 
D 
DB 


27 
ENEMY 
ER 
.F 
FLANK 
FOP. 


28 
HAVE 
HQ 
I 
IN 
IIIFO 


29 
L 
LE 
)-.1 
MACH 
t.fENT 
GUU 


JO 
NORTH 
0 
OF 
mr 
ORDER 


31 
RE 
REGT 
REPORT 
HE QUEST 
s 


32 
STOP 
SUPPORT 
T 
TANK 
BEGIU 
SPELL 


33 
v 
w 
WEST 
WILL 
X 


34 
2 
3 
4 
5 
6 


Sample Message: 


BEGIN 
REPORT 
SPELL 
NE 
w 
3140 
3242 
2945 
3339 


43 
44 


ATTACK 
B 


DIVISION 
E 


FROM 
G 


IITG 
IT 


NSG 
H 


p 
POSI 
TION 


SE 
SECTOP 


THAT 
TIOH 


y 
z 


7 
8 


END 


SPELL 
POSITION 
OF 


3246 
3044 
3040 


4 ,- 
. 
i) 


BE 


E.AST 


H 


J 


NE 


Q 


SEND 


u 


ZEPO 


9 
-·--- 


Ri:..G'l.' 


3139 


46 


c 


~,, 
I 
.t:.i• 


HP.S 


K 
I 
I 
NO 
I 


R 


SOU'I'H 
I 


EiTD 
I 
SPELL 


1 


0 


STOP 
3230 


Figure 15-2 <q). Matrix code (U). 


b. The cryptographic operation of the system is 
quite simple, following the same methods as given 
for multiliteral systems. For example, the plaintext 
message: 


REPORT NEW POSITION OF REGI~IENT 


is enciphered as: 


3140 321,.2 2945 3339 3246 3044 3040 3139 3238 


Note that each plaintext value is represented by the 
row and column indicator which intersected at the 
position of the desired plaintext value. Thus 3140 


equates to REPORT. Note also that words which 
do not appear in the chart are spelled out, as in the 
case of NEW which is represented by two code 


groups, 2945=NE and W =3339. This characteristic, 
in conjunction with specific groups which indicates 


when to begin spell (321,.2) and \YhPn to •·rHI spell 


(3246) is a means of C'ntry into thP syst('lll 


c. A variant form of the matrix cod(' illtt,.;trated 


in figure 15-3 is the so-cal!C'd "upper and '"'' t'l' <"ase" 


matrix code. Essentially it is similar to tht· twrmul 


matrix code, only so structured ns to ('ontain t\Hl 


plaintext values in each cell. Thus t lw ··a pa('i ty of 
the matrix is doubled and variant plaintt•-;t ,-,dues 


for the equivalent code group nrc introd11,.,.d. The 


cryptographic operation of this systPm j,.; "irnilnr to 
that of the foregoing \\"ith one l'XePptiott. That is, 


in this systC'm at kast t,,-o groups "·hiclt JlDI'lllall~­ 
havP but one plain va!tw are sl't asid,. to i11dicatp 


\vhethcr the groups following nrP upp•·r "r IO\n•r 


case. An C'Xamplc of this system and thl' flll'thod of 
its operation arc shown in figure 15-3. 
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2 
3 
4 
5 


II 
A 
1 
AliD 
AT 
---~- J 
:-~- -ARTY- ---- -- --- 
ATTACK 
BARRAGE 
BATTALION 


B 
2 
BE 
- 
_]Y_- ----- 
,_BATTERY - 
BEGTII- 
-BRIDGE- 
CAPTURE 
LOWER CASE 
1J 


c 
3 
CA. 
CE 
co 


!cASUALTY -COI-1}Wl'D- cOMiruNI:- COMPAliY- -coossR6Ai)s- 
25 


CATIO!I 


D 
4 
DA 
DE 
,_DAILY- - 
i5As1f - 
-DISPosr.:- DIVIS:fO!I- -uPP'ERc.ASE- 
37 


TIO!I 


--~- 
DR 
E 
_ _.2 __ 
ED 
EAST 
-!!:ME' LACE:- -UIEl·~- 
EQUIP- 
-JM:py --- 
49 


J.IEI·IT 
MElT 


Sample message: 


BEGI!f ATTACK AT 1245 liOURS A.l'W CAPTURE BRIDGE 321. 


BEGIN 
ATTACK 
UPPER CASE 
AT 
1 
2 
4 
5 


132 
113 
375 
114 
112 
132 
372 
494 


AlW 
LOWER CASE 
CAP'i'URE 
BRIDGE 
UPPER CASE 


113 
135 
134 
133 
375 


3 
2 
1 
252 
132 
112 


Figure 15-3 <f>· Upper case, lower case, matrix code (U). 


Although a system of this type introduces variant 
values, i.e. the code group 252 may indicate either 
the number 3 or the word COMMAND, it does not 
provide a great deal more security than the normal 
matrix code. Its chief advantage lies in the inclusion 
of a long vocabulary. 
d. Syllabary codes are used either to supplement 
a book code by adding a means of expanding its 
vocabulary, or to provide a flexible means of secret 
communications. As in all matrix codes, it appears 


R 
81 
RE 
83 
R 
81 
RE 
83 


E 
C 


35 
25 


CO 
N 
29 
60 


E CO 


35 
29 


CON 


25 
76 


0 
74 


N 


60 


N 


60 


N 


60 


N 


60 


A 
11 
N 


60 


A 
11 


N 


60 


I S 


59 
A 
11 
I S 


59 


e. Code charts are similar to the syllabary square 
in that they are of like dimensions and operate on 
the same cryptographic principles. A significant 
difference between the two is that the code chart 
containing \Vords and phrases is normally designed to 
serve a specific function, while the syllabary square 
has more general application. Further, the code chart, 
being limited in intent, normally contains less 
internal variants. An example of these facets of a 
code chart may be seen in one of its more common 
applications: an operator's code. A code chart of this 


A 
11 


in the form of a matrix. However, the contents of 
the matrix are norm.ally limited to letters, numbers, 
and syllables. Cryptographically, it is abo similar 


to multiliteral systems, having row and column 
coordinates for the purpose of designating the plain- 


text element within the cells of the matrix. A sample 
of a syllabary square is shown in figure 15-4. 


2 
J 
4 
5 
6 
7 
8 
[) 
0 


1 
A 
1 
AL 
AN 
AND 
AR 
ARE 
AB 
A": 
A"'"=' 


2 
AT! 
B 
2 
BE 
c 
3 
CA 
CE 
co 
CO:\ 


J 
D 
4 
DA 
DE 
E 
5 
EA 
ED 
I:ll 
Elf':' 


4 
ER 
ERE 
ERS 
ES 
EST 
F 
6 
G 
7 
}; 


5 
8 
¥.AS 
HE 
I 
9 
III 
I:iG 
IOli 
IS 
rr: 


6 
IVE 
J 
¢ 
K 
L 
LA 
LE 
r.: 
~~;:z 
li 


liD 
HE 
l.fT 
0 
OF 
011 
OR 
ow 
p 
" 
i « 
7 


8 
R 
RA 
RE 
RED 
RES 
RI 
RO 
! s 
c- 
I s· 
.:.:J..:. 
n 


9 
ST 
STO 
T 
TE 
TED 
TER I TH 
7}11'" - 
Tni I ':'li? I 


TI 
TO 
u 
v 
VE 
:,; I WL IX 
y I z J 
----- 
0 


Figure 15-4 f)· Syllabary square (C). 


The system provides for all the letters of the alpha- 


bet, the cardinal numbers, and the m~n· common 


polygraphs. Also, the placenwnt of th<' plnitttt•xt 


elements are such that the finding of any \·altit' is 


easy for the cryptographer. In dft•d. t lw ,;y:-<tf'rn 


above provides variant \·alues by th(' inrltt,.,iott of 


both letters and polygraphs, withotit \·arinnt I'll\\ 


and column coordinates. For exampk. t II•· 
mH·d 


reconnaissance could appear in ciphertext a,;: 


I 
s 
S AN CE 
or 


54 
88 
88 
14 
28 


S AN CE or 
88 
14 
28 
I S 
s 
A 
N 
c 
E 
or 
59 
88 
11 
60 
25 
35 


S AN 
c 
E 
etc. 
88 
11,. 
25 
35 


type contains those common wonts. phr<l"""· <l!H'r- 
ating signals, and words that n•ln tl' din·..t I\· t" tlH· 
establishment and maintt>tutnct' of eommtttttl·:ttintl:'i 


between two points. Provision is rnnd<· f,r 
t ht• 


cardinal num hers and occn.sionally tlw l<'t t '·r" ,f t lw 


alphabet. Although security of interopPrator rnrnmu- 


nications may be important in tlw,.;t• ea:i<'"· tht· ~·hit•f 


object is to be the provision of a concist· nnd rapid 


means of communications. Figure 15-.5 d1·picts a 


type of operator code. 
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0 
3 
4 
5 
6 
7 
8 
9 


1 
QAP 
QRA 
QRM 
QRN 
QRO 
QRP 
QSA 
QSU 
10 


A 
z 
Read 
Read 
20 
QSP 
Numbers 
Signals 
2 


B 
1 
3 
30 
QSL 
GTA 
3 
c 
J 
0 
4 
QRK 
QRL 
40 
w 
Routine 


4 


D 
K 
p 
s 
5 
.50 
u 
X 
Priority 
5 


E 
L 
Q 
T 
60 
6 
v 
y 
Immediate 


6 


F 
M 
R 
70 
QTR 
QSY 
7 
z 
Flash 
7 


G 
N 
80 
QRX 
QRX 
QRZ 
QRV 
8 
QTC 


I 
8 
Refer 


H 
90 
your 
9 
QRW 


9 
Message 


Read 
Number lrecedenci 
Read· 
0 
Phrases 
Letters 
0 


Figure 15-5 <1). Operator's code (U). 


1 5-3. ~ 
Enciphered Codes 
Occasionally the code groups of coded messages 


undergo a further process of enciphernwn t; the 
resulting cryptogram constitutes an enciphered codt' 


message. Enciphered code is used to enhance tlw 


security of a widely held code. It can bt> used as a 
means of securing messages encoded in common com- 


mercial and telegraphic codes, and it can be us<'d 


when increased security is required for highly classi- 
fied communications normally passed in a less secure 
system. 
a. Both of the two general classes of cipher 
methods, transposition and substitution, can be used 


to encipher code. Encipherment by transposition is 
used less as it is subject to error and requires highly 
skilled personnel for its practical use. The bulkiness 
of code materials and elements makes transposition 
encipherment of codes unwieldy for practical military 
use. 
b. All of the methods of substitution from the 
simple monoalphabetic methods to the most complex 


polyalphabetic systems can be used for the encipher- 


mont of code groups. Substitution tnblt>s of various 
sorts are often used. Tables mny be ust>d to con \'ert 


5-letter code groups to pronounceable groups of 5 


letters, to convert 5-letter code groups to 5-fiptrP 
codr groups, or simply to con ,·ert combination:,; of 
letters into other combinations. The most important 
method, howewr, is thr arithmetical method ,,·hich 


is favored because of its simplicity and relatin' spl't'd 


of operation as compared to that of the alphabetical 


methods. 
c. Two basic arithmetic trchniq ues nrc used. They 


arc addition and subtraction. In both, nn arbitrarily 
selected sequence of numbers, normally cOITespotHl- 


ing in length to the code group. is :Hided to or 


subtracted from the code group using noncnrrying 


methods. The resulting sum or quotient becomes the 
ciphertext for transmission. The recipient of thl' 


message has only to reverse the operation, using the 
same key to uncover the plain code groups. Both 
processes are shown in figure 15-6. 
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~: 


:res sage 


Code 


Additive 
Text 


Text 
Subtractive 
Code 
Message 


Subtractive: 


Message 


Code 


Subtractive 
Text 


Text 
Additive 


Code 


Message 


Enciphering 


EIIU·IY FORCES DEPLOYED ALONG IUVI:R LI!IE 
2o14 
2JJ? 
12JJ 
0864 
O??l 
2J?O 
2701 
2701 
2701 
2701 
2701 
2701 
4215 4o38 
3934 
2'565 2472 
4671 


Deciphering 


4215 
4038 
3934 
2565 
2472 
4671 


2701 
2701 
2701 
£701 
2701 
2701 
EIT 2'iJ7 rm 
0864 o??z mo- 
ENEHY FORCES DEPLOYED ALONG RIVER LI!ri:: 


Enciphering 


ENEMY FORCES DEPLOYED ALONG RIVER LillE 
2o14 
2JJ? 
Z2JJ 
0864 
o??1 
2J?O 
0891 
8709 
9579 
8426 
7268 ~ 


2723 Tib3li 
2"fb4 
2m 3 513 969b 


Deciphering 


2723 
4638 
27G4 
2448 
3?13 
909G 
0891 
o709 
~579 
8426 
7268 
39b4 
2o14 
2JJ? 
1233 
0864 077i B7o 
ENEI-IY FORCES DEPLOYED ALONG RIVER LINE 


Figure 15-6 r). Arithmetic enciphered codes ([:). 


The additive or subtractive may be fixed or variable. 


Fixed additives and subtractives, i.e. a series of 
numbers, the same or repeating, used to encipher 
each code group, are particularly weak cryptograph- 
ically if the basic code system contains any inherent 
limitations in size or sequential arrangement. If, 
however, a variable additive or subtractive, i.e. 
nonrepeating groups, is used, a much more secure 
system may be provided. Variable additives or 
subtractives are normally obtained from special 
tables or lists which contain a series of heterogeneous 
elements, none of which is used more than o1.1ce. 
Using this method, a high degree of security may be 
imparted to the enciphered message, even if the 
basic code book is possessed by the enemy. 


1 S-4. (~) Disadvantages and Advantages of 


· 
Code Systems 
a. One great disadvantage of code systems is thP 


sheer bulk of material required to provide a com- 
prehensive vocabulary and the attendant problems 
of distribution and operation. However, code sys- 


tems offer certain advantages which in some cases 


may outweigh the disadvantages. The advantages are: 


(1) Code systems offer a more secure means of 
communications than most other hand systems, 
particularly in the case of small two-part codes 


which are superseded rapidly. 
(2) Economy in transmission is made possible 


by the nature of code systems. That is, it is possible 
to express an entire word or thought and conny it 
by a single group; whereas in cipher systems the 


same word or thought requires a great deal more in 
the way of ciphertext to accomplish the same thing. 
(3) Code systems are particularly adaptnbk to 
languages which are based on idiographs as arP 


Chinese and Japanese. In Chinese for exampk, to 
allow for the transmission of idiographs, the "Chinese 


telegraphic code" was compiled. This code l'Ontnins 
10,000 characters, each represented by onP ('ode 


group and arranged similar to a two-part code. 
b. In terms of military usage, code finds it,; 


greatest application both in brevity codes and in 
field codes. A brevity ~ode has for its sole purpose 


the shortening of messages and is not necessarily a 


secret code. An example of this typC' code may be· 


observed in the Q and Z signals common to tele- 


communications. A field code, on the othN hand, is 
a secret code and is designed primarily for lo,,-_ 


echelon units. Code systems which are oftpn us<>d for 
this purpose are the matrix codes given abo\·p and 


occasionally two-part codes with limitC'd ,-ocabu- 


laries. An example of this type code may be Sl'l'll 


in the current US Army KAC-P operation ccHks. 


1 5-S. (d Introduction 


Section II. <f> ANALYSIS OF CODES 


The an{J;sis of any code beyond the most simple 
form is dependent upon the availability of a volume 
of messages derived from the same system. The 
volume of messages required for successful analysis 
is in direct proportion to the complexity of the 
system. The analysis of complex systems generally 
presupposes the use of data processing equipment to 
sort, collate, and list significant repeats and char- 
acteristics observed in the raw traffic in preparation 
for an9:lysis. The use of this material enables the 
analyst to enter the system through some identifiable 
characteristic. Through a preliminary study of 


associated communications data 
( callsigns, 
fre- 
quencies, operator chatter, etc.), characteristics of 
the code system (indicators, syllabary spC'lling, 


special indicators, etc.), and collateral information 
concerning the units and their operations, thl' analyst 


may isolate specific messages and identify certain 


plaintext values, such as placPnames, personrwl, 


and stereotypes which may be used to brc>nk into 
the code's values. In short the analysis of code 
systems involves the study of large volumes of 
material. For this reason, and since in military 
usage code systems find their greatest application as 


field codes, this section will trent only the analysis 


of matrix codes. 
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1 S-6. ~ 
Principles of Analysis 
a. Since the cryptographic principles underlying 
the operation of matrix codes are similar to those of 
multiliteral systems, the same general techniques 
are used with some slight modification to fit each 
situation. Additionally, the characteristics them- 
selves provide a basis for analysis of the matri..x 


code. These characteristics are given belov,·, and 


their significance in terms of analytic attack is 
noted. However, they are not listed in order of 
importance, as the applicability of each is determined 
by the system itself, which is subject to variation. 
b. The plaintext values in a code matrix are 
usually arranged in some systematic order, usually 
alphabetically, to ease the encoding process. However, 
this is not always the case, for some systems may 
have plaintext values inserted in the cells of the 
matrix in random order. The significance of the former 
case lies in the possibility of assuming additional 


plaintext· values and of placing questionable values. 
Eor example, in the matrix code shown in figure 
15-2, note that the sequence of plaintext values in 
the first ro'v of cells is "A, ADVANCE, AMMO, 


AN, AND, ATTACK, B, BE, and C" respectively. 
If the values "AMMO and AND" had been previ- 
ously placed, one could obviously assume that the 
intervening cell \Vould contain a plaintext value 
beginning with A arrd having either an M or N as its 
second letter. Of course where the plaintext values 
are inserted randomly, this technique is inappropriate. 
c. The row and column coordinates are usually 
one or two digits each, forming groups of two, three, 
or four digits. The coordinates where numbers are 
used may be in numerical order, some systematic 
disarranged order, or randomly ordered. The same 
situation may apply in cases where letters are used. 
However, since the amount of letters available is 
greater than the amount of numbers possible, vari- 
ations are increased. Insofar as analysis is concerned, 
the significance of two points, their identity and the 
method of their order, lies in the possibility of their 
use as a means of entry into the system. Usually, in 
all forms of matrix codes, the coordinates are changed 
regularly to provide a degree of security to offset 
the limitation imposed by the usual small size of 
the matrix, where interior values are generally 
fixed. Thus, once the initial recovery of a matrix is 
accomplished in part or in whole, analysis thereafter 
is concerned with the recovery of the row and col- 
umn coordinates. If a systematic method of genera- 
tion and assignment is involved, it is possible that 
the analyst may be able to predict their use in 
advance. If this does occur, then cryptanalysis is 
replaced by cryptography. The patterned use of 
row and column indicators is also of significance in 


the initial analysis of a matrix system as it often 
permits the placement of possible values within thP 


matrix and the prior location of all <.'oordinates 


during the initial stage of analysis. 


d. Also of importance to the cryptanalyst is the 


use of special code groups \Yithin a matrix to indi- 
cate: begin spell, end spell, read number, read letter. 


upper case, and lower case. Note that the n1riant 


values provided by matrix systems for spP<.'ial 


meanings are usually some\\·hat limitt-d. Th('reforP 


their use introduces a limitation into thP rr•stdtant 


code which provides a sure entry into thC' system. 


The initial break into most matri:-. code systems 
and book codes, where syllabary spelling is a part, 


is through the recovery of syllabary spelling or 
numbers. The principle of analysis is quite simplP 
where spelling is the basis of attaek. Th<' analyst 


searches the intercepted traffic for OIH' or mort· groups 


which are repeated quite frequently. assuming that 
these groups represent the S{Wcial indi<.'ators. If 
these are found, the code groupt> lying lwt\\"('Pil an· 


extracted and studied as citlwr pm;siblC' spd!Pd 


words or sequences of numbers. These in turn ar<' 


searched for recognizable patterns and com{>tln'd to 
a list of suspect words or numbers ,,·hieh. through 
the analysis of collateral information, ha n• bt>en 


determined to be words likely to appear in the under- 
lying plaintext. From this comparison. possiblP 


p1aintext values ar~ assigned to the code groups. 


the values being· used to assume additional "·onls. 


e. The complete solution of a gin•n system nor- 
mally involves the use of one or morP of the tech- 
niques outlined above, and when sen'rnl nrp usf'd. 


analysis is usually approached on n simultaneous 


basis. That is, after the system is first identified and 
its messages are isolated, all techniques nre Pm- 


ployed to reconstruct the original encoding matrix 


and derive the plaintext equivalencies of tlw codP 


text. The methodology involnd hrrPin is discussed 


in other paragraphs. 


15-7. <¢ Identification 
a. Identification of matrix codes rests on their 
similarity to multiliteral systems. That is, the code 
groups will appear almost exactly like the cipher 
groups produced by long multiliteml tables. Factors 


which might serve to distinguish the t\\·o are: the 


repeated appearance of a few groups equating to the 
special indicators mentioned previously, a1Hl perhnps 
a slight variation bet,veen observed and expected 
digraphic frequency distribution. Hmvever, these 
means of initial identification are extremely tenuous. 
Normally, identification comes through either a 


process of elimination (that is, a solution is first 
atttmpted as a multiliteral, then when failing, the 
system is assumed to be a mtttrix code) or from 
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preknowledge of the system in use by the corre- 


spondents. 
b. Code groups, when they are three to five 
digits in length, are normally tran~mitted in their 
original length. Smaller groups of t\vo or three 
digits may be combined in some instances for 
transmission. The study of these groups often permits 
the identification of the code systerri. For example, 
code groups produced by a matrix often show 
positional limitations in their structure, again 


similar to the limitations produced by multiliteral 
cipher systems. This may be seen in the group~ below. 


1344 7344 6322 7300 2311 3388 7344 1366 
5355 8322 6300 4333 2388 4377 0366 3366 


3300 6399 1333 2388 6322 7333 /}311 
734-~ 


1366 2388 


A glance suffices to show that only a fe,v combinations 
of dinome~ are involved in each group. The limita- 


tions in the case are: 


Row coordinates 
03, 13, 23, 33, 43, 53, 63, 73, 83, 93 
Column coordinates 00, OJ, 22, 33, 44, 55, 66, 77, 88, 99 


With such obvious values as coordinates, the analyst 
could assume with certainty that the system is 
based upon a 10 x 10 matrix. Moreover, the pro- 


gression of the numbers themselves is possibly 
indicative of the order of their assignment to the rows 
and columns. 
c. As a general rule, positional limitations will 


ahvays be present in matrix codes, although not as 
apparent. Exceptions to this rule occur when the 
number of rows or columns match the number of 
different values used. For example, in the case of a 


10 x 10 matrix where single numbers are used, all 
possible combinations are exhausted, thus no limi- 


tation will exist. This may be observed in figure 15-7. 


1 
2 
3 
4 
5 
6 
7 
8 
9 
0 
I 
I 
I 


1 


2 


3 


4 


5 


6 


7 


8 


9 


0 


Code groups possible 00 through 99 


Figure 15-7 (U). 10 x 10matrix, single digit coordinates (U). 


If on the other hand the number of possible combina- 
tions exceeds the total number of cells, a definitP 


limitation exists. This may be observed in figure 
15-8. 


10 


20 


30 


40 


50 


60 


70 


80 


90 


00 


09 
19 
29 
39 
49 
59 
69 
79 
69 
99 


Possible code groups 0009 - 9099 


Groups used 
100 


Figure 15-8 (U). 10 x 10 matrix, dinome coordinates (U). 


15-8. ~ Matrix Reconstruction 
a. ).fatrix reconstruction in the case of initial 
analysis involves the study of 
charnc.teristic~. if 
any, of both coordinate generation and a~signm0n t. 
and the sequence of the plaintext value~ inserted 
in the cell~ of the matrix. If some systematic nwthod 


is involved and is recognizable early in the analytic 


attack, the whole process of cryptanalysis can be 
greatly simplified. 
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b. In the case of coordinates, the analyst first 
determines if a limitation exists in the code groups. 
If this occurs, he uses these limitations to determine 
the total size of the matrix and the dimensions in 
terms of numbers of rows and columns. Using this 
information, he constructs a skeleton matrix. If 
some pattern exists in the digits used as coordinate 
indicators, he may attempt to place them correctly 
prior to the analysis of the internal plaintext values. 
The correct sequence of randomly generated eo- 


ordinates cannot, of course, be determined without 


the prior recovery of the internal values. Where 
generation is involved, prior or concurrent place- 
ment is always possible. In those cases where the 
coordinates are rapidly superseded and where all or 
part of the internal values are known, this becomes 
doubly important. Some examples of systematic 
generation are: 


Numerical order 


20 21 22 23 24 25 26 27 28 29 


Constant additive ( +9) 
86 95 04 13 22 31 40 49 58 67 
Progressive additives ( + 1, 2, 3, 4, 5, 6, 7, 8, 9) 
10 11 13 16 20 25 31 38 46 55 


c. When analysis has progressed to the point where 


plaintext values are assumed for specific cofiP groups, 
the order in which they are inscribPd in the matrix 
should be carefully checked. Often, but not always, 


inscription of plaintext values follo\YS a specific routP. 


If this route can be identified, assumption of plain- 
text values is greatly simplified as identification 
of each given group can be limited to a restricted 
number of choices. This limitation is expecially 


important where a pattern in the order of ro\\· and 


column coordinates has been predetermined. In 
this case the placement of plaintext values is not 
subject to distortion by errors of location. 


Section Ill. <if> ANALYSIS OF MATRIX CODES 


15-9. <q> Analysis of Code Charts 


a. The analysis of procedure tables or operator 
code charts is usually a rather simple task. This is 
due in part to the internal limitations of the code 
chart and also to the circumstances in which the 
code chart would be used. For example, the code 
charts, as shown in the preceding example, are 
generally limited on content, subject matter, and 
occasion of use, and usually refer to the operations 
of a communications system only. Given the knowl- 
edge of the circumstances surrounding the trans- 
mission of a particular message, the analyst can 
usually infer its contents. Hence, it is but a short 
step to the recovery of the plaintext value. 
b. An additional factor that usually aids in solving 


these systems is that charts of this type are in- 
frequently changed. Thus the analyst over a period 
of time is able to recover all interior plain values. 


Once this has been accomplished, further analysis 
of the system becomes a case of key recovery. 
c. The periods of key usage· will vary from case 
to case usually depending upon the usage of the 
chart. In some cases, they can be changed daily; in 
others, weeks may elapse before they are changed. 
In either case, key recovery is based on applying a 
procedure in reverse to that used heretofore, i.P. 


the analyst will find himself determining the correct 
cipher elements for one or more known values. For 
example, if the analyst knew that the digraphs 
01 92 22 10 54 related to a message "QSY 5965," 


he woi.lld have little difficulty in placing the row and 
column indicators in their respective correct posi- 


tions. Further recovery and development of the 
chart is merely a matter of time. 


15-10. (~) Analysis of Syllabary Squares 


a. Essentially, the only difference bet\veen the 
method and technique of solving for plaintext of 
codes produced by a syllabary code and the previ- 
ously covered multiliteral system lies in the ,~olume 


of material required. For a given code sequence of 
assumed plaintext value, a larger number of plain- 


text elements may have to be considered. The code 


text for the word RECONNAISSAXCE shown in 
paragraph 15-2 illustrates this point. Four possible 
forms of encoding were given. Assume then that 
the analyst knows that the sequence 81 35 29 60 60 
11 59 88 11 60 25 35 equates to that \\·onl. Even 
with this knowledge, he still has to determine the 
correct way in which the \vorcl is divided, i.e. does 
81c= Rp or does it equal REp. In cases such as 


these, the analyst must modify his interpretation of 
frequency characteristics and idiomorphic patterns. 
b. As a general rule, solution of this system is 
quite difficult in those cases where a volume of 
messages produced by a given system is lacking or 
where the cryptographer has made full use of the 


,~a.riants available within the system. Fortunately. 
cryptographers often develop patterns of usage which 
are beneficial to the cryptanalyst. On occasion some 
will tend to reuse certain code values consistently, 
thus producing an easily identifiable \Vorcl pattern. 


Moreover, this consistent use of one code value 


for one letter or polygraph establishes that one-to- 
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one relationship which quickly leads to the deter- 


mination of a plaintext value. 
c. Another method in which it is possible to 
establish plaintext values for a number of variants 
is the analysis of a number of messages which have 
repeated elements, words, or stereotyped phrases. 
The significance of this can be observed in the cod- 
ings given for RECONNAISSANCE above. The 
similarity in the structure of the cipher sequences, 
representing different possibilities of encoding, would 
lead the analyst to valid assumptions concerning 
the structure of the underlying word. For example, 
consider the code group repeated in figure 15-9. 


(1) 
81 
35 
25 
74 
60 
60 
11 
54 
88 
88 
14 
28 


(2) 
83 
29 
6"0 
60 
11 
59 
88 
14 
28 


(3) 
81 
35 
29 
60 
60 
11 
59 
88 
11 
60 
2ii 
35 


(4) 
83 
25 
76 
60 
11 
:)9 
88 
14 
25 
35 


Figure 15-9 <f). Idiomorphism in code sequences (U). 


(1) Examination of the first three code se- 
quences reveals the repeated dinome 60 preceded 
by four, three, and two dinomes respectively. Since 


60 is repeated, it is probably a single letter rather 
than a digraph or trigraph. If in the first code 


sequence the groups 81 35 25 7 4 represent 4 letters 
preceding the repeated letters indicated by 60, then 
the groups 83 29 of the second sequence must repre- 
sent the same letters as digraphs. Further, :;ince the 


first and third sequences start with the same two 
dinomes, 81 and 35, but differ in that the groups 


25 7 4 of the first is replaced by 29 in the third, then 
83 of the fourth equals a combination of the values 


for 81 and 35, and 29 for 25 and 7 4. This can be 
shown as: 
81 
35 
83 
25 74 


29 


60 
60 
60 
60 


Following the same logic, the following equivalencies 
are discovered: 
81+35=83 
25+74=29 


74+60=76 


54+88=59 
11 +60=14 


25+35=28 


(2) With equivalencies established, it becomes 


possible to break the code sequence into uniliteral 


terms, thus forming the basis for dra\\·ing up word 


patterns. For example, the code sequences abO\·e 


could be reduced to the following code digraphs and 


one-word patterns established as shown: 


A B C D D E F G G E D B A 
81 35 25 74 60 60 11 54 88 88 11 60 25 35 
R E C 0 
N N A I 
S S A N C E 


d. Another method of entry into a syllabary 
square which does not require the depth of text 
that the above implies is the study and classification 
of repetition characters. This classification is based 
upon a general knO\vledge of the behavior of general 
classes of plaintext elements. For example, code 
units representing digits may appear in clusters 
representing time, map coordinates, etc. Further, 
particular digits in certain usages have positional 
limitations. The first digit of the 24-hour time sys- 
tem, for example, is limited to 0, 1, or 2; the second 
digit will use all numbers 1 through 0, the third 
from 0 to 5, and the last 1 through 0. Further, the 


0, one of the three numbers appearing in the first 
position, may also appear double in the last two 
positions with any noteworthy frequency. 
e. In either case, once sufficient equivalencies can 
be established, it becomes possible to reduce the 
greater part of the text to uniliteral terms and solve 
accordingly. The way is also opened for the recovery 
of the matrix. If the analyst has either a wholly-or 


a parti&lly-recovered matrix available, the solution 
is thereby greatly simplified, as values can be 
assumed with a great degree of certainty. 


f. An important point in respect to reducing a 


matrix code to uniliteral terms is that this is possible 
only under the circumstances where the encoding 
process proceeds along a nearly one-for-one basis. 
That is, a given code group equates to a giYen letter 
more often than it equates to a polygraph. Such a 


situation most often occurs in syllabary squares or in 
matrices which made them susceptible to this par- 
ticular method of attack. 


1 5-11 . ~ Analysis of Matrix Codes 


a. The analysis of matrix codes follows the same 
general approach as that used for syllabary squares. 


That is, the code groups are studied to determine 
their inherent positional limitations. From their 
limitations the dimensions of the matrix ttre assumed 


and, using the row and column values, a reconstruc- 


tion matrix is set up. Where possible, the initial entry 


into the system is made through sequences of 
syllabary spelling. Then, equivalencies for the code 


groups are established and the plaintext values are 


inserted into the body of the matrix. Once segments 
of spelling can be identified and the plaintext deter- 
mined, it then becomes possible to attack the 
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remaining code groups on the basis of possible plain- 
text values which can be associated with the spelled 
sequences. 
b. Note that this proposition depends entirely on 
the use of syllabary spelling in the code under 


analysis and the ability of the analyst to identify 
these sequences. Normally, identification is predi- 
cated on the basis of isolating repeated sequences in 
the code text of a number of messages. For this 


purpose an index listing prepared by data processing 
facilities may be used. An index listing is nothing 
more than a systematic listing of the groups that 


appear in a series of messages believed to have been 
produced by the same code system. There is no fixed 
type of index, its specific form being determined by 
the structure of the code system under analysis and 
the requirements of the analyst. Two common types 


are: an index of repeated groups, and an index of 
repeated sequences. 
(1) An index of repeated groups is made up of 
a listing of all repeated groups appearing in a n urn ber 
of messages. Additionally, the repeated groups are 
keyed to a specific message and location within that 
message. This type of listing is convenient to use 


where great numbers of codes are processed and 


where a complete listing of all the groups would be 
too bulky. It is also useful for the initial identification 
of the special indicators discussed previously. 
(2) The second general type is an index of 
repeated sequences. This can be based on the previous 
type index where specific groups have been isolated 
as spelling indicators or, if such are not used in u. 


particular code system, simply a list of repeated 


sequenc4:ls. This particular index form is especially 
suitable for the location and subsequent analysis of 


syllabary spelling sequences that occur in the body 
of a code as differentiated from stereotyped begin- 
nings or endings. 
c. In the case where no indication is gi\"en that a 


sequence represents a spelled word or phrase, the 
possibility always exists that it might represent u. 


sequence of words rather than letters. In such cases, 
differentiation can sometimes be made on the 
frequency and position of the repeated groups. For 
example, if a repeated sequence of eode groups 


appettred consistently at the beginning or ending of 


a message, one could assume that it represented a 


stereotype address and, in this ease, might represent 
words. On the other hand, if a given sequence 
appeared in different positions in several messages, 


one might assume that it represented a commonly 


nsed spelled word. In either case, note that identifi- 


cation of this sort is merely an assumption which 


has to be either proved or disproved in subsequent 
analysis. 


rl. Assuming that a number of given sequences 


have been isolated as spell-sequences, the problem 
then is to determine what words are actually being 
spelled. The general appmach is to attempt to fit 
the sequence to a stereotype common to the com- 


munications under study. These stereotypes may be 
military terms, titles, ranks, geographic place names, 
etc. In actual practice, the analyst's familiarity \\·ith 


the communications system, the correspondents. n.iHl 


the area of operations is n.n inntluable aid. The 


:tetual recovery of plaintext equivalencies for code 
groups can make use of idiomophic patterns of the 


\nmls. ~ote that these pattern,; may represent single 


letters as well as polygraphs, thouf!'h usually digraphs 
are not common. 
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APPENDIX A (ri, 


FREQUENCY DISTRIBUTfONS OF ENGLISH 
DIGRAPHS 


Frequency distributions of English digraphs appearing in 50,000 letters of governmental 
plaintext telegrams, reduced to 5,000 digraphs . 
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A 
B 
c 
D 
E 
F 
G 
H 


I I 


J 
K 
L 
M 


IN 
0 


p 


Q 
R 
5 
T 
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v 
w 
X 
y 
z 


~- 


A 


3 


4 


20 


32 


35 


5 


7 


20 


8 


I 


1 


I 


36 


26 


7 


14 


39 


24 


28 


5 


6 


12 


2 


6 


1 


370 


I 


B c D 


6 
14 27 


3 
1 


4 
4 
8 


4 
32 60 


2 
1 


2 
1 


1 
3 
2 


2 
22 
6 


1 


3 
3 
9 


6 
3 
1 


3 
19 52 


4 
8 
17 


1 
1 
I 


2 
9 
17 


3 
13 
5 


3 
6 
6 


3 
3 
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1 


2 
4 
4 
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Table A-1 f. Frequency distribution-digraphs (U). 


E F G H I J K L M N 0 p Q R 5 T 


1 
4 
6 
2 
17 
1 
2 
32 14 64 
2 
12 
44 41 
47 


18 
1 2 
1 
6 
1 
4 
2 
1 
1 


32 
1 
14 7 
4 
5 
1 
1 
41 
4 
I 
14 


33 
8 
2 
2 
27 
1 
3 
5 
4 
16 
5 
2 
12 
13 
15 


42 
18 
4 
7 
27 
I 
29 
14 111 
12 20 12 
17 54 37 


10 
11 
1 
39 
2 
I 
40 
I 
9 
3 
11 


14 
2 
I 
20 
5 
1 
2 
I 
3 
6 
2 
5 
3 
4 


20 
5 
33 
1 
2 
3 
70 
1 
1 
17 
4 
28 


13 
10 
19 
2 
23 
9 
75 41 
7 
27 
35 27 


2 
2 


6 
2 
1 
1 
I 


37 
3 
1 
1 
20 
27 
1 
13 
3 
2 • I 


26 
I 
1 
9 
13 
10 
I 
2 
4 
2 


57 
9 
27 
4 
30 
I 
2 
5 
5 
a 
Ia 
3 
1 
4 
24 82 


3 
25 
2 
3 
5 
1 
2 
19 
25 77 6 
25 
64 
14 
19 


23 
2 
3 
6 
13 
4 
1 
17 11 
II 
6 
a 


I 
1 


91 
6 
7 
3 
30 
1 
1 
5 
9 
7 
28 13 
11 
31 
42 


49 12 
2 
26 34 
I 
2 
3 
4 
15 10 
5 
19 63 


71 
7 
1 
78 45 
5 
6 
7 
50 
2 
1 
17 19 19 


11 
1 
8 
5 
6 
5 
21 
1 
31 
12 
12 


57 
12 
1 
1 


22 
4 
13 
1 
2 
19 
1 
I 


1 
1 
1 
2 
I 
1 
2 
I 
I 
7 


9 
11 
1 
1 
3 
2 
2 
6 
10 
3 
4 
11 
15 


2 
1 


657 137 82 170 374 a 
14 
189 123 J397 373 130 17 368 304 f462 


1 
7 
12 
10 
3 
18 
19 
6 
6 
1 
3 
8 
21 
4 
4 
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13 
7 
3 
12 
374 3 


2 
7 
49 14 


4 
1 
I 
155 
a 


5 
3 
4 
I 
209 3 


3 
20 
7 
7 
4 
I 
648 I 


3 
1 
I 
141 
9 


2 
I 
12 
7 


a 
1 
I 
171 
7 


25 
15 
2 368 7 


2 
- 
7 
2.2 


13 
19 


2 
2 
2 
10 
183 
5 


2 
2 
126 10 


7 
3 
3 
5 
397 2 


37 
7 
a 
I 
2 
376 2 


3 
I 
I 
I 
135 6 


15 
17 23 


5 
5 
4 
9 
312 3 


11 
1 
4 
I 
307 4 


5 
36 
41 
1 
454 4 I 


1 
130 
I 
9 


77, 21 


I 
76 
16 


123 
13: 


I 
I 
I 96 
7 


4 
23 I 


130 
75 77 23 99 
4 ~ 


7 
15 II 
3 10 
23 
2481 
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Table A-2 S9[ The 428 digraphs of Table A-1, arranged according to their absolute frequencies, 
accompanied by the logarithms of their assigned probabilities (U). 


F 
LlO L224 
F LlO Lzz4 
F 
(F) 
(2F) 
(F) 
(2F) 


EN .... 
111 2.05 . 99 
DA . .. 
32 1.51 .76 
OL .... 
19 
RE .... 
98 1.99 .96 
EC .... 
32 1.51 . 76 
OT .... 
19 
ER .... 
87 1.94 .94 
·Rs .... 
31 1.49 .75 
ss .... 
19 
NT .... 
82 1.91 .93 
UR ... 
31 1.49 .75 
TS .... 
19 
TH .... 
78 1.89 .92 
NI .... 
30 1.48 .75 
TT .... 
19 


ON ... 
77 1.89 .92 
R1 .... 
30 1.48 75 
wo ... 
19 
IN .... 
75 1.88 .92 
EL .... 
29 1.46 .74 
BE .... 
18 
TE .... 
71 1.85 .91 
HT .... 
28 1.45 .74 
EF .... 
18 
AN . . . 
64 1.81 . 89 
LA .... 
28 1.45 .74 
NO 
~ . 
-. 
18 


OR ... 
64 1.81 .89 
RO . .. 
28 1.45 .74 
PR .... 
18 


ST .... 
63 1.80 .88 
TA .... 
28 1.45 .74 
AI .... 
17 
ED .... 
60 1.78 .88 
22,495 
HR . .. 
17 
NE .... 
57 1.76 . 87 
PO .... 
17 
VE .... 
57 1.76 . 87 
AD . . . 
27 1.43 .73 
RD . .. 
17 
ES .. 0. 
54 1.73 . 86 
DI .... 
27 1.43 .73 
TR .... 
17 
ND . . . 
52 1.72 .85 
EI .... 
27 1.43 .73 
DO ... 
16 


TO .... 
50 1.70 .84 
IR .... 
27 1.43 .73 
DT .... 
15 


SE .... ~ 
1.69 .84 
IT .... 
27 1.43 .73 
IX .... 
15 
11,249 
LL .... 
27 1.43 .73 
QO . . . 
15 
NG . . . 
27 1.43 .73 
so .... 
15 
AT .... 
47 1.67 .83 
ME ... 
26 1.41 .72 
YT .... 
15 
TI .... 
45 1.65 .82 
NA ... 
26 1.41 .72 
AC .... 
14 
AR ... 
44 1.64 . 82 
SH .... 
26 1.41 .72 
AM ... 
14 
EE .... 
42 1.62 .81 
IV .... 
25 1.40 .72 
CH · .... 
14 
RT .... 
42 1.62 .81 
OF .... 
25 1.40 .72 
CT .... 
14 


AS .... 
41 1.61 .80 
OM ... 
25 1.40 .72 
EM ... 
14 
co .... 
41 1.61 . 80 
OP .... 
25 1.40 .72 
GE .... 
14 


IO .... 
41 1.61 .80 
NS , ... 
24 1.38 .71 
OS ... ·. 
14 
TY .... 
41 1.61 .80 
SA .... 
24 1.38 .71 
PA .... 
14 


FO .... 
40 1.60 . 80 
IL .... 
23 1.36 .70 
AU ... 
13 
FI .... 
39 1.59 .80 
PE .... 
23 1.36 .70 
DS 
0 ... 
13 
RA . . . 
39 1.59 .80 
IC .... 
22 1.34 .69 
IE .... 
13 
ET .... 
37 1.57 .79 
WE ... 
22 1.34 .69 
LO .... 
13 
LE .... 
37 1.57 .79 
UN ... 
21 1.32 .68 
MM ... 
13 
ou . . . 
37 1.57 .79 
CA .... 
20 1.30 .67 
PL .... 
13 
MA ... 
36 1.56 .78 
EP .... 
20 1.30 .67 
RP .... 
13 
TW ... 
36 1.56 .78 
EV .... 
20 1.30 .67 
sc .... 
13 
EA .... 
35 1.54 .78 
GH . . . 
20 1.30 .67 
WI .... 
13 


IS . . . . 
35 1.54 .78 
HA ... 
20 1.30 .67 
33,745 


SI .... 
34 1.53 .77 
HE .... 
20 1.30 .67 
DE .... 
33 1.52 .77 
HO . .. 
20 1.30 .67 
AP .... 


HI· .... 
33 1.52 .77 
u .... 
20 1.30 .67 
AY . . . 
AL .... 
32 1.51 .76 
IG .... 
19 1.28 .67 
DR .o. 


CE .... 
32 1.51 .76 
NC .... 
19 1.28 .67 
EO .... 


1 The 18 digraphs above this line compose 25% of the total. 
2 The 53 digraphs above this line compose 50% of the total. 
3 The 122 digraphs above this line compose 75% of the total. 


12 
12 
12 
12 
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11...10 
Lzz4 
F LlO 
L224 
(F) 
(2F) 
(F) 
(2F) 


1.28 .67 
EQ .... 
12 1.08 .58 
1.28 .67 
OD . .. 
12 1.08 .58 
1.28 .67 
SF .... 
12 1.08 .58 
1.28 .67 
us .... 
12 1.08 .58 
1.28 .67 
lJf .... 
12 1.08 .58 
1.28 67 
VI .... 
12 1.08 .58 
1.26 .66 
WA ... 
12 1.08 .58 
1.26 .66 
FF .... 
11 1.04 .56 
1.26 .66 
FT .... 
11 1.04 .56 
1.26 .66 
PP .... 
11 1.04 .56 
1.23 .64 
RR ... 
1111.04 .56 
1.23 .64 
su .... 
11 1.04 .56 
1.23 .64 
UE .... 
11 1.04 .56 
1.23 .64 
YF .... 
11 1.041.56 
1.23 .64 
YS .... 
11 1.04.56 


1.20 .63 
FE .... 
10 1.00 .55 
1.18 .62 
IF .... 
10 1.00 .55 
1.18 .62 
LY ... ; 
10 1.00 .55 
1.18 .62 
MO ... 
10 1.00 .55 
1.18 .62 
SP .... 
10 1.00 .55 
1.18 .62 
YO . .. 
10 1.00 .55 
1.15 .61 
FR .... 
9 0.95 .53 


1.15 .61 
IM .... 
9 0.95 .53 
1.15 .61 
LB .... 
9 0.95 .53 
1.15 . 61 
MI .... 
9 0.95 .53 
1.15 .61 
NF .... 
9 0.95 .53 
1.15 .61 
RC .... 
9 0.95 .53 
1.15 .61 
RM ... 
9 0.95,.53 
1.15 .61 
RY ... 
9 0.95!.53 
1.11 .59 
YE .... 
9ID.951.53 


1.11 .59 
DD ... 
810.90 .51 
1.11 .59 
DF .... 
8 0.90 .51 
1.11 .59 
HU . .. 
8 0.90 .51 
1.11 .59 
IA .... 
8 0.90 .51 
1.11 .59 
LT .... 
8 0.90 .51 
1.11 .59 
MP .... 
8 0.90 .51 
1.11 .59 
NN . .. 
8 0.90 .51 
1.11 .59 
oc .... 
8 0.90 .51 
ow ... 
8 0.90 .51 
PT .... 
8 0.90 .51 


1.08 .58 
UG . .. 
8 0.90 .51 


1.08 .58 
AV ... 
7 0.85 .48 


1.08 .58 
BY .... 
7 0.85 .48 


1.08 .58 
CI .... 
7 0.85 .48 


A-3 


A-4 


l!!'t"' a.t-=-le ,_ a.1 ... 1 A I 
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Table A-2 (fQ. The 428 digraphs of Table A-1, arranged according to their absolute frequencies, 
accompanied by the logarithms of their assigned probabilities (U)- Continued 


FL10 Lzz4 
Fli-10 L224 
FiL10 Lzz4 
FL10 L224 
(F) 
(2F) 
(F) 
(2F) 
F) 
(2F) 
(F) 
(2F) 


EH .... 
7 0.85 .48 
RU ... 
5 0.70 .42 
GS .... 
3 0.48 .33 
JE .... 
2 0.30 .25 
EW ... 
70.85 .48 
RV ... 
5p.7o . 42 
HC .... 
3 0.48 .33 
JO .... 
20.30 .25 
EX .... 
7 0.85 .48 
SD .... 
5~.70 .42 
HN ... 
3 0.48 .33 
JU .... 
20.30 .25 
GA ... 
70.85 .48 
SR .... 
5p.7o .42 
LB .... 
3 0.48 .33 
K1 .... 
20.30 .25 
IP .... 
7 0.85 .48 
TL .... 
5~.70 .42 
LC .... 30.48 .33 
LM ... 
2 0.30 .25 
NU ... 
70.85 .48 
TU .... 5p.7o .42 
LF .... 
3 0.48 .33 
LR .... 
2 0.30 .25 


OA . . . 70.85 .48 
UA ... 
5p.7o .42 
lP .... 
3 0.48 .33 
LU .... 
2 0.30 .25 
ov ... 
7 0.85 .48 
UI .... 
5 0.70 .42 
MC ... 
3 0.48 .33 
LV .... 
20.30 .25 
RG ... 
7 0.85 .48 
UM ... 
5~.70 .42 
NP .... 3p.48 .33 
LW ... 
2 0.30 .25 
RN ... 
7 0.85 .48 
AF .... 4p.60 .38 
NV ... 3 0.48 .33 
MR ... 
2 0.30 .25 
TF .... 7 0.85 .48 
BA .... 
40.60 .38 
NW ... 
3p.48 .33 
MT ... 
2 0.30 .25 
TN .... 7 0.85 .48 
BO .... 
40.60 .38 
OE .... 
3 0.48 .33 
MU ... 
2 0.30 .25 
XT .... 
70.85 .48 
CK .... 4p.60 .38 
OH ... 
3 0.48 .33 
MY ... 
2 0.30 .25 
AB .... 
60.78 .45 
CR .... 40.60 .38 
PH .... 
3 0.48 .33 
NB .... 
20.30 .25 
AG ... 
60.78 .45 
cu .... 40.60 .38 
PU .... 
3 0.48 .33 
NK . .. 
2 0.30 .25 
BL .... 60.78 .45 
DB .... 
40.60 .38 
RH ... 
3p.48 .33 
OG ... 
20.30 .25 


GO . . . 
60.78 .45 
DC .... 
40.60 .38 
SB .... 
3p.48 .33 
OK ... 
2 0.30 .25 
ID .... 
60.78 .45 
DN ... 
40.60 .38 
SM .... 
3p.48 .33 
. OY ... 
20.30 .25 
KE .... 60.78 .45 
DW ... 
40.60 .38 
TB .... 
3 0.48 .33 
PF .... 
2 0.30 .25 
LS .... 
6 0.78 .45 
EB .... 
40.60 .38 
UB .... 3 0.48 .33 
RB .... 
2 0.30 .25 
MB ... 
60.78 .45 
EG .... 40.60 .38 
uc .... 
3 0.48 .33 
SG .... i0.30 .25 


00 ... 
60.78 .45 
EY .... 40.60 .38 
UD ... 30.48 .33 
SL .... 
2 0.30 .25 


PI .... 
60.78 .45 
GT .... 40.60 .38 
YI ; ... 
3 0.48 .33 
TP .... 
2 0.30 .25 
PS .... 6 0.78 .45 
HS .... 40.60 .38 
yp .... 
3 0.48 .33 
UP .... 20.30 .25 
RF .... 60.78 .45 
MS .... 40.60 .38 
AH ... 2p.30 .25 
WN ... 20.30 .25 
TC .... 60.78 .45 
NH ... 
40.60 .38 
AK ... 20.30 .25 
XA ... 2 0.30 .25 
TD .... · 6 0.78 .45 
NR ... 
40.60 .38 
AO ... 
20.30 .25 
XC., .. 
2 0.30 .25 
TM ... 
60.78 .45 
OB .... 
40.60 .38 . BI .... 
20.30 .25 
XI .... 20.30 .25 
UL .... 6 0.78 . 45 
PM .... 40.60 .38 
BR .... 
20.~0 .25 
XP .... 2 0.30 .25 


VA ... 
60.78 .45 
RW ... 40.60 .38 
BU .... 
20.30 .25 
YB 
~ ... 
2,0.30 .25 


YA ... 60.78 .45 
SN .... 
40.60 .38 
DG ... 
20.30 .25 
YL .... 
2 0.30 .25 
YN ... 
60.78 .45 
sw .... 
40.60 . 38 
DH ... 
2 0.30 .25 
YM ... 
2 0.30 .25 
CL .... 
5 0.70 .42 
WH ·'· 4 0.60 .38 
DQ ... 2 0.30 .25 
ZE .... 
210.30 25 
DM ... 
5 0.70 .42 
YC .... 
40.60 . 38 
FC .... 
20.30 .25 
AE .... 
10.00 .I3 


DP .... 
5 0.70 .42 
YD . .. 
40.60 .38 
FL .... 2 0.30 .25 
AJ .... 
I 0.00 .13 
DU ... 
5 0.70 .42 
YR ... 
40.60 .38 
GC .... 2 0.30 .25 
BJ .... 
I 0.00 .13 
FA .... 5 0.70 .42 
AA ... 
3 0.48 .33 
GF .... 20.30 .25 
BM . .. 
I 0.00 .I3 
Gl .... 
5 0.70 .42 
AW ... 
3 0.48 .33 
GL .... 2 0.30 .25 
BS .... 
I 0.00 .13 
GR ... 
5 0.70 .42 
cc .... 
3 0.48 .33 
GP .... 2 0.30 .25 
BT .... 
I 0.00 .13 
HF .... 
5 0.70 .42 
DL .... 
3 0.48 . 33 
GU ... 
2 0.30 . 25 
CD .... 
I 0.00 .I3 
NL .... 
5 0.70 .42 
DV ... 
30.48 . 33 
HD ... 
2 0.30 .25 
CF .... 
I 0.00 .13 
NM ... 
5 0.70 .42 
EU .... 
30.48 . 33 
HM ... 
20.30 .25 
CM . .. 
10.00 .13 
NY ... 
5 0.70 .42 
FS .... 
30.48 .33 
IB .... 20.30 .25 
CN .... 
I 0.00 .I3 


01 .... 5 0.70 .42 
FU .... 
3 0.48 . 33 
IK .... 20.30 .25 
cs .... 
10.00 .13 
RL .... 
5 0.70 .42 
GN ... 
30.48 . 33 
IZ .... 20.30 .25 
cw ... 
1 0.00 .I3 
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Table A-2 ~ 
The 428 digraphs of Table A-1, arranged according to their absolute frequencies, 
accompanied by the logarithms of their assigned probabilities (U)- Continued 


FfLlO 
L224 
F L10 
L224 
F L10 
L224 
F L10 
L224 
F) 
(2F) 
(F) 
(2F) 
F) 
(2F) 
(F) 
(2F) 


CY .... 
10.00 .13 
HW ... 
10.00 .13 
PD .... 
10.00 .13 
WL ... 
10.00 .13 
DJ .... 
1 ~.00 . 13 
HY ... 
10.00 .13 
PN .... 
10.00 .13 
WR ... 
1 0.00 .13 
DY ... 
1 ~.00 .13 
JA .... 
10.00 .13 
PV .... 
10.00 .13 
ws .... 
10.00 .13 
EJ .... 
10.00 .13 
KA ... 
10.00 . 13 
PW .... 
10.00 .13 
WY ... 
1 0.00 .13 


EZ .... 
1 ~.00 13 
KC .... 
1 0.00 .13 
py .... 
10.00 .13 
XD ... 
10.00 .13 
FD .... 
10.00 .13 
KL .... 
10.00 .13 
QM ... 
10.00 . 13 
XE .... 
10.00 .13 
FG .... 
10.00 .13 
KN ... 
10.00 .13 
QR . .. 
10.00 .13 
XF .... 
10.00 .13 
FM ... 
1 ~.00 . 13 
KS .... 
10.00 .13 
RJ .... 
10.00 .13 
XH . .. 
10.00 .13 
FP .... 
10.00 .13 
LG .... 
10.00 .13 
RK ... 
10.00 .13 
XN . .. 
10.00 .13 
FW . . . 
10.00 .13 
LH .... 
10.00 .13 
SK .... 
10.00 .13 
xo ... 
10.00 .13 
FY .... 
10.00 .13 
LN .... 
10.00 .13 
sv .... 
10.00 .13 
XR ... 
10.00 .13 
GD . . . 
1 0.00 .13 
MD ... 
1 0.00 .13 
SY .... 
10.00 .13 
xs .... 
1 0.00 .13 
GG . . . 10.00 13 
MF ... 
10.00 . 13 
TG .... 
10.00 .13 
YG . .. 
1 0.00 .13 
GJ .... 
1~.00 . 13 
MH ... 
10.00 .13 
TQ .... 
10.00 .13 
YH ... 
10.00 .13 
GM ... 
10.00 13 
NJ .... 
10.00 .13 
TZ .... 
10.00 .13 
YU ... 
10.00 .13 
GW ... 
10.00 .13 
NQ ... 
10.00 .13 
UF .... 
10.00 .13 
YW ... 
1 0.00 .13 
HB .... 
1~.00 .13 
OJ .... 
10.00 .13 
uo ... 
10.00 .13 
ZA .... 
1 0.00 .13 
HL .... 
10.00 .13 
ox ... 
10.00 .13 
uv ... 
10.00 .13 
ZI .... 
1 0.00 .13 
HP .... 
10.00 .13 
PB .... 
10.00 .13 
vo ... 
10.00 .13 
s:om 


HQ ... 
10.00 .13 
PC .... 
10.00 .13 
VT .... 
10.00 .13 
__ L__ __ -··- 
···- --- 
. 


Table A-3 J£1. The 18 digraphs composing 25% of the digraphs in Table A-1, accompanied by the logarithms of 
their assigned probabilities, arranged alphabetically according to their initial letters (U) 


(1) AND ACCORDING TO THEIR FINAL 


LETTERs· 


(2) AND ACCORDING TO THEIR ABSOLUTE 
FREQUENCIES 


F 
LlO L224 
F LlO L224 
F 
LlO L224 
F LlO L224 
F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


AN 
. . . 
64 1.81 .89 
ON ... 
77 1.89 .92 
AN . .. 
64 1.81 .89 
ON 
. .. 
77 1.89 .92 


OR ... 
64 1.81 .89 
OR . .. 
64 1.81 .89 


ED .... 
60 1.78 .88 
RE .... 
98 1.99 .96 
EN .... 
111 2.05 .99 
RE .... 
98 1.99 .96 
EN .... 
111 2.05 .99 
ER .... 
87 1.94 .94 
ER .... 
87 1.94 .94 
SE .... 
49 1.69 .84 
ED .... 
60 1.78 .88 
ST .... 
63 1.80 .88 
ES .... 
54 1.73 .86 
ST .... 
63 1.80 .88 
ES .... 
54 1.73 .86 
SE .... 
49 1.69 .84 


TE .... 
71 1.85 .91 
TH .... 
78 1.89 .92 
IN .... 
75 1.88 .92 
TH .... 
78 1.89 .92 
IN .... 
75 1.88 .92 
TE .... 
71 1.85 .91 


TO .... 
50 1.70 .84 
TO .... 
50 1.70 .84 


ND ... 
52 1.72 .85 
VE . .. . 571.76 . 87 
NT .... 
82 1.91 .93 
VE .... 
57 1.76 .87 
NE .... 
57 1.76 .87 
. 
T,249 
NE .... 
57 1.76 .87 
1,249 
NT .... 
82 1.91 .93 
ND ... 
52 1.72 .85 
---- 
- 
- 
~~ 
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Table A-4 ~The 53 digraphs composing 50% of the digraphs of Table A-1, accompanied by the logarithms of 
their assigned probabilities, arranged alphabetically according to their initial letters (U) 


(1) AND ACCORDING TO THEIR FINAL 
LETTERS 


F 
Lw L224 
F LIO L224 
(F) 
(2F) 
(F) 
(2F) 


AL .... 
32 1.51 .76 
MA ... 
36 1.56 .78 
AN ... 
64 1.81 89 
AR . . . 
44 1.64 .82 
ND . . . 52 1.72 .85 


AS .... 
41 1.61 80 
NE .... 
57 1.76 . 87 
AT .... 
47 1.67 .83 
Nl .... 
30 1.48,.75 
NT .... 82 1.91 .93 


CE .... 
32 1.51 76 
co .... 
41 1.61 80 
ON . .. 
77 1.89 .92 


OR ... 
64 1.81 .89 
DA . . . 
32 1.51 76 
ou . . . 37 1.57 .79 
DE .... 
33 1.52 77 
RA ... 
39 1.59 .80 


EA .... 
35 1.54 .78 
RE .... 
98 1.99 .96 


EC .... 
32 1.51 .76 
RI .... 
30 1.48 .75 
ED .... 
60 1.78 .88 
RO . .. 
28 1.45 .74 
.EE .... 
42 1.62 .81 
RS .... 
31 1.49 .75 
EL .... 
29 1.46 .74 
RT .... 
42 1.62 .81 
EN .... 
111 2.05 .99 
ER .... 
87 1.94 .94 
SE .... 
49 1.69 .84 
ES .... 
54 1.73 .86 
Sl . ... 
34 1.53 .77 
ET .... 
37 1.57 .79 
ST .... 
63 1.80 .88 


FI .... 
39 1.59 .80 
TA .... 
28 1.45 .74 


FO .... 
40 1.60 .80 
TE .... 
71 1.85 .91 
TH .... 
78 1.89 .92 
HI ..... 
33 1.52 . 77 
TI .... 45 1.65 .82 
HT .... 
28 1.45 .74 
TO .... 
50 1.70 .84 
1W . . . 36 1.56 .78 
IN .... 
75 1.88 .92 
TY .... 
41 1.61 .80 
10 .... 
41 1.61 .80 
IS 
0 
.... 
35 1.54 .78 
UR . . . 31 1.49 .75 


LA .... 
28 1.45 .74 
VE .... 
57 1.76 .87 
z.m 


LE .... 
37 1.57 .79 


(2) AND ACCORDING TO THEIR ABSOLUTE 
FREQUENCIES 


F 
LlO L224 
F Lw L224 
(F) 
(2F) 
(F) 
(2F) 


AN . .. 
64 1.81 .89 
MA ... 
36 l.Sl78 
AT .... 
47 1.67 .83 
AR ... 
44 1.64 .82 
NT .... 
82 1.911.93 
AS .... 
41 1.61 .80 
NE .... 
57 1.761.87 


AL .... 
32 1.51 .76 
ND . .. 
52 1.72!.85 
NI .... 
30 1.481.75 
co .... 
41 1.61 .80 
CE .... 
32 1.51 .76 
ON ... 
77 1.89! .92 


3311.52 
OR ... 
64 1.811.89 


DE .... 
.77 
ou ... 
37 1.571.79 


DA ... 
32 1.51 .76 
I 


RE .... 
98 1.99j.96 
EN .... Ill 2.05 .99 
RT .... 
42 1.62! .81 
ER .... 
87 1.94 .94 
RA . .. 
39 1.59J.80 


ED .... 
60 1.78 .88 
RS .... 
31 1.49j .75 


ES .... 
54 1.73 .86 
RI .... 
30 1.48 .. 75 
EE .... 
42 1.62 .81 
RO . .. 
28(4l74 
ET .... 
37 1.57 .79 
EA .... 
35 1.54 .78 
ST .... 
6311.80 .88 


EC .... 
32 1.51 .76 
SE .... 
4911.69 .84 
EL .... 
29 1.46 .74 
SI . ... 
34 1.53 .77 


FO .... 
40 1.60 .80 
TH .... 
78 1.89 .92 
FI .... 
39 1.59 .80 
TE .... 
71 1.85 .91 


TO .... 
50 1.70 .84 
HI .... 
33 1.52 .77 
TI .... 
45 1.65 .82 
HT .... 
28 1.45 .74 
TY .... 
41 1.61 .80 


1W ... 
36 1.56 .78 
IN .... 
75 1.88 .92 
TA .... 
28 1.45 .74 


10 .... 
41 1.61 .80 
IS 
0. 0 
• 
35 1.54 .78 
UR ... 
31 1.49 .75 


LE .... 
37 1.57 .79 
VE . . . . 
57 1.76 .87 


2,495 


LA .... 
28 1.45 .74 
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Table A-5 ~The 122 digraphs composing 75% of the digraphs of Table A-1, accompanied by the 
logarithms of their assigned probabilities, arranged alphabetically according to their 
initialle t te rs (U) 


(1) AND ACCORDING TO THEIR FINAL LETTERS 


F LlO 
L224 
F 
L10 L224 
F ! L10 L224 
F 
~~10 ~-L224 


(F) 
(2F) 
(F) 
(2F) 
I (F) 
(2F) 
,(F) I (2F) 


AC .... 
14 1.15 .61 
ER .... 
87 1.94 .94 
MA ... 
3611.56 .78 
RS . . . . 
3111.49i.75 


AD . . . 
27 1.43 .73 
ES .... 
5411.73 .86 
ME . . . 
2611.411.72 
RT .... 
42,1.62,.81 


AI .... 
17 1.23 .64 
ET .... 
3711.57 .79 
AL .... 
32 1.51 .76 
EV .... 
20 1.30 .67 
NA ... 
261.41,.72 
SA .... 
24[1.38i.71 
AM ... 
14 1.15 .61 


' 
...• - . 
~ 
. NC .... 
19!1.281.67 
SE .... 
49 1.69i.84 
AN . . . 
64 1.81(9 
FI .... 
3911.59 .80 
ND ... 
52 1.72i.85 
SH .... 
26 1.41j.72 
AR ... 
44 1.64.82 
FO .... 
40 1.60.80 
NE .... 
57 1.76i.87 
SI .... 
34 1.531.77 
AS .... 
41 1.61 .80 
NG . . . 
27 1.43\.73 
so .... 
15 1.18!.62 
AT .... 
47 1.67,.83 
GE .... 
1411.15.61 
NI .... 
30 1.48,.75 
ss .... 
19 1.28!.67 


AU . . . 
13 1.11,.59 
GH ... 
20 1.30 .67 
NO . . . 
18 1.261.66 
ST .... 
63 1.801.88 
I 
NS .... 
24 1.381.71 
I 
! 
BE .... 
18 1.26 .66 
HA ... 
20 1.30 .67 
NT 
82 il.91 :.93 
TA .... 
I 
I 
. . . 
28,1.451.74 
HE .... 
20 1.30.67 
TE .... 
71 i1.85 .91 


CA .... 
20 1.30 .67 
HI .... 
33 1.52 .77 
OF .... 
25 it.40,.72 
TH .... 
781!.891. 92 
CE .... 
32 1.51 .76 
HO ... 
20 1.30 .67 
OL .... 
19,1.28 i.67 
TI .... 
45,1.65 .82 


CH .... 
14 1.15 .61 
HR ... 
17 !1.23 .64 
OM ... 
25 1.401.72 
TO .... 
50il.70 .84 
co .... 
41 1.61 . 80 
HT .... 
28 '1.45 .74 
ON ... 
7711.891.92 
TR .. .. 
17 il.23j.64 


CT .... 
14 1.15 . 61 
OP .... 
25,1.40!.72 
TS .. .. 
I9jl.28,.67 


DA ... 
32 1.51 .76 
IC .... 
22 1.34.69 
OR ... 
64 1.81 ~.89 
TT . . . . 
19r.28 .67 
DE .... 
33 1.52 .77 
·IE .... 
1311.11 .59 
OS .... 
14!1.15i.61 
TW .. . 
36 1.56 .78 , 


DI .... 
27 1.43 .73 
IG .... 
19 1.28 .67 
OT .... 
19jl.28 .67 
TY . . . . 
41 r61,.80 . 
DO ... 
16 1.20 .63 
IL .... 
23 1.36 .70 ou . .. 
3711.57 .79 


DS .... 
13 1.11 .59 
IN .... 
75 1.88 .92 


I 


i 
UN 
. . . 
21,1.32 1.68 


DT .... 
15 1.18 .62 
IO .... 
41 1.61 .80 
PA .... 
1411.15 .61 
UR . . . 
31 r49;.75 


IR .... 
27 1.43 .73 
PE .... 
23,1.361.70 
VE . . . . 
5711.761.87 
EA .... 
35 1.54 .78 
IS .... 
35 1.54 .78 
PO .... 
17 1.23 .64 


EC .... 
32 1.51 .76 
IT .... 
27 1.43 .73 
PR .... 
18,1.26 .66 
I 
I 
ED .... 
60 1.78 . 88 
IV .... 
25 1.40 .72 
WE 
. . . 
2211.34J.69 


EE .... 
42 1.62 .81 
IX .... 
15 1.18 .62 
QU ... 
15!1.18 .62 
wo . . . 
19,1.28,.67 


EF .... 
18 1.26 .66 


39,1.59 
EI .... 
27 1.43 .73 
LA .... 
28 1.45 .74 
RA ... 
.80 
YT .. -~11.18 
1 .62 


EL .... 
29 1.46 .74 
LE .... 
37 1.57 .79 
RD ... 
1711.23 .64 
3,745 
I 
EM . . . 
14 1.15 .61 
u .... 
20 1.30.67 
RE .... 
98 1.99 .96 
EN .... 
111 2.05 .99 
LL .... 
27 1.43 .73 
RI .... 
30,1.48 .75 
EP .... 
20 1.30 .67 
LO .... 
13 1.11 .59 
RO ... 
2811.45 .74 
I 
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Table A-5 (U). The 122 digraphs composing 75% of the digraphs of Table A-1, accompanied by the logarithms 
of their assigned probabilities, arranged alphabetically according to their initial letters (U) - 


Continued 


(2) AND ACCORDING TO THEIR ABSOLUTE FREQUENCIES 


F 
LlO L224 
F LlO L224 
F LlO L224 
F LlO 
L224 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


AN . . . 
64 1.81 .89 
EI .... 
27 1.43 .73 
MA ... 
36 1.56 .78 
RI .... 
30!1.481.75 
AT .... 
47 1.67 .83 
EP .... 
20 1.30 67 
ME ... 
26 1.41 .72 
RO ... 
28 1.45 .74 
AR ... 
44 1.64 .82 
EV .... 
20 1.30 67 
RD . .. 
17 1.23 .64 


AS .... 
41 1.61 .80 
EF .... 
18 1.26 66 
NT .... 
82 1.91 .93 
AL .... 
32 1.51 .76 
EM ... 
14 1.15 61 
NE .... 
57 1.76 .87 


6311.80 
AD . . . 
27 1.43 .73 
ND ... 
52 1.72 .85 
ST .... 
.88 
AI .... 
17 1.23 .64 
FO .... 
40 1.60 80 
NI .... 
30 1.48 .75 
SE .... 
49,1.69 .84 


AC .... 
14 1.15 .61 
FI .... 
39 1.59 80 
NG ... 27 1.43 .73 
SI 
• • 0. 
34 1.53 .77 
AM ... 
14 1.15 .61 
NA ... 
26 1.41 .72 
SH .... 
26 


11.41 .72 


AU . . . 
13 1.11 .59 
GH ... 
20 1.30 67 
NS .... 
24 1.38 .71 
SA .... 
24 1.38 .71 
GE .... 
14 1.15 r61 
NC .... 
19 1.28 .67 
ss .... 
19 1.281.67 
BE .... 
18 1.26 .66 
NO . . . 18 1.26 .66 
so .... 
15 1.18 .62 
HI .... 
33 1.52 77 
co .... 
41 1.61 .80 
HT .... 
28 1.45 .74 
TH .... 
78J1.89I.92 
CE .... 
32 1.51 .76 
HA ... 
20 1.30 .67 
ON . .. 
77 1.89!.92 
TE .... 
7111.85i.91 
CA .... 
20 1.30 .67 
HE .... 
20 1.30 67 
OR . . . 64 1.81 .89 
TO .... 
50 1.70J.84 
CH .... 
14 1.15 .61 
HO ... 
20 1.30 .67 
ou ... 
37 1.57 .79 
TI .... 
45 1.651.82 
CT .... 
14 1.15 .61 
HR ... 
17 1.23 64 
OF .... 
25 1.40 .72 
TY .... 41(61 .80 
OM ... 
25 1.40 .72 
TW ... 
36 1.56 .78 
IN .... 
75 1.88 92 
OP .... 
25 1.40 .72 
TA .... 
2811.451.74 
DE .... 
33 1.52 .77 
IO .... 
41 1.61 80 
OL .... 
19 1.28 .67 
TS .... 
1911.28 .67 
DA . . . 
32 1.51 .76 
IS . . . . 
35 1.54 78 
OT .... 
19 1.28 .67 
TT .... 
1911.28.67 


DI .... 
27 1.43 .73 
IR .... 
27 1.43 73 
OS .... 
14 1.15 .61 
TR .... 
17; 1.23 .64 
DO ... 
16 1.20 .63 
IT .... 
27 1.43 73 
DT : . .. 
15 1.18 .62 
IV .... 
25 1.40 72 
PE .... 
23 1.36 .70 
DS .... 
13 1.11 .59 
IL .... 
23 1.36 70 
PR .... 
18 1.26 .66 
UR ... 
31 1.49 .75 


IC .... 
22 1.34 69 
PO .... 
17 1.23 .64 
UN ... 
21 1.32 .68 
EN .... 
111 2.05 .99 
IG .... 
19 1.28 67 
PA .... 
14 1.15 .61 
I 


ER .... 
87 1.94 .94 
IX .... 
IS 1.18 62 
VE .... 
57 1.76 .87 
ED .... 
60 1.78 .88 
IE .... 
13 1.11 59 


ES .... 
54 1.73 .86 
QU ... 
15 1.18 .62 
WE ... 
22 1.34 .69 
EE .... 
42 1.62 .81 
LE .... 
37 1.57 79 
wo 
~.67 
ET .... 
37 1.57 .79 
LA .... 
28 1.45 74 
RE .... 
98 1.99 .96 
YT . . . . 
15 !.181.62 
EA .... 
35 1.54 .78 
LL .... 
27 1.43 73 
RT .... 
42 1.62 .81 


EC .... 
32 1.51 .76 
LI .... 
20 1.30 67 
RA ... 
39 1.59 .80 
3,"145 
I 
EL .... 
29 1.46 .74 
LO .... 
13 1.11 59 
RS .... 
31 1.49 .75 
- 
l_ 
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Table A-6 ~ 
The 428 digraphs of Table A-1, arranged in alphabetic order by initial letters, then by 
absolute frequencies accompanied by the logarithms of their assigned probabilities (U) 


F LlO L224 
F LlO L224 
F LlO 
L224 
F 
LlO 
L224 
(F) 
(2F) 
(F) 
(2F) 
F) 
(2F) 
(F) 
(2F) 


AN ... 
64 1.81 .89 
CT .... 
14 1.15 .61 
ED .... 
60 1.78 .88 
GH . .. 
20 1.30 .67 
AT .... 47 1.67 .83 
Cl .... 
70.85 .48 
ES .... 
54 1.73 .86 
GE .... 
14 1.15 .61 
AR ... 
44 1.64 .82 
CL .... 
5 0.70 .42 
EE .... 
42 1.62 .81 
GA ... 
7 0.85 .48 
AS .... 
41 1.61 .80 
CK .... 
40.60 .38 
ET .... 
37 1.57 .79 
GO ... 
610.78 .45 
AL .... 
32 1.51 .76 
CR .... 
40.60 .38 
EA .... 
35 1.54 .78 
GI .... 
5 0.701.42 


AD . . . 27 1.43 .73 
cu .... 
40.60 .38 
EC .... 
32 1.51 .76 
GR ... 
5 0.701.42 


AI .... 
17 1.23 .64 cc .... 
3 0.48 .33 
EL .... 
29 1.46 .74 
GT .... 
4'0.60 .38 


AC .... 
14 1.15 .61 
CD .... 
10.00 .13 
EI .... 
27 1.43 .73 
GN ... 
3 0.48 .33 
AM ... 
14 1.15 .61 
CF .... 
10.00 .13 
EP .... 
20 1.30 .67 
GS .... 
3 0.48 .33 


AU ... 
13 1.11 .59 
CM ... 
10.00 .13 
EV .... 
20 1.30 .67 
GC .... 
2 0.30 .25 
AP .... 
12 1.08 .58 
CN .... 
1 0.00 .13 
EF .... 
18 1.26 .66 
GF .... 
2 0.30 .25 


AY . . . 
12 1.08 .58 cs .... 
10.00 .13 
EM ... 
14 1.15 .61 
GL .... 
2 0.30 .25 
AV ... 
7 0.85 .48 
eN ... 
1 0.00 .13 
EO .... 
12 1.08 .58 
GP .... 
2 0.30 .25 
AB .... 
6~.78 .45 
CY .... 
10.00 .13 
EQ .... 
12 1.08 .58 
GU ... 
2 0.30 .25 
AG ... 
6 0.78 .45 
EH .... 
7 0.85 .48 
GD . .. 
1 0.00 .13 
AF .... 
40.60 .38 
DE .... 
33 1.52 .77 
EW ... 
7 0.85 .48 
GG . .. 
1 0.00 .13 
AA ... 
3 0.48 . 33 
DA ... 
32 1.51 .76 
EX .... 
7 0.85 .48 
GJ .... 
1 0.00 .13 
AW ... 
3P.48 . 33 
DI .... 
27 1.43 . 73 
EB .... 
4 0.60 .38 
GM ... 
1 0.00 .13 
AH ... 
20.30 .25 
DO ... 
16 1.20 .63 
EG .... 
40.60 .38 
GW ... 
110.00 .13 
AK ... 
20.30 .25 
DT .... 
15 1.18 .62 
EY .... 
40.60 .38 


AO ... 
2p.30 . 25 
DS .... 
13 1.11 .59 
EU .... 
3 0.48 .33 
AE .... 
10.00 .13 
DR ... 
12 1.08 .58 
EJ .... 
10.00 .13 
AJ .... 
10.00 .13 
DD ... 
8 0.90 . 51 
EZ .... 
10.00 .13 
HI .... 
33 1.52 .77 
DF .... 
8 0.90 .51 
HT .... 
28 1.45 .74 
BE .... 
18 1.26 .66 
DM ... 
5 0.70 .42 
FO .... 
40 1.60 .80 
HA ... 
20 1.30 .67 


BY .... 
7~.85 .48 
DP .... 
5 0.70 .42 
FI .... 
39 1.59 .80 
HE .... 
20 1.30 .67 
BL .... 
6p.78 .45 
DU ... 
5 0.70 .42 
FF .... 
11 1.04 .56 
HO ... 
20 1.30 .67 
BA .... 
4~.60 .38 
DB .... 
40.60 .38 
IT .... 
11 1.04 .56 
HR ... 
17 1.23 .64 


BO .... 
4p.60 .38 
DC ..... 
40.60 .38 
FE .... 
10 1.00 .55 
HU ... 
8 0.90 .51 
BI .... 
2 0.30 .25 
DN ... 
40.60 .38 
FR .... 
9 0.95 .53 
HF .... 
510.70 .42 
BR .... 
2~.30 .25 
DW ... 
40.60 .38 
FA .... 
5 0.70 .42 
HS .... 
40.60 .38 


BU .... 
20.30 . 25 
DL .... 
3 0.48 .33 
FS .... 
30.48 .33 
HC .... 
3 0.48 .33 
BJ .... 
10.00 .13 
DV ... 
3 0.48 .33 
FU .... 
3 0.48 .33 
HN ... 
310.48 .33 
BM ... 
10.00 .13 
DG ... 
2 0.30 .25 
FC .... 
20.30 .25 
HD . .. 
2 0.30 .25 


BS .... 
1 jo.oo .13 
DH ... 
2 0.30 .25 
FL .... 
2 0.30 .25 
HM ... 
2 0.30 .25 
BT .... 
10.00 .13 
DQ ... 
2 0.30 .25 
FD .... 
1 0.00 .13 
HB .... 
1 0.00 .13 
DJ .... 
1 0.00 . 13 
FG .... 
10.00 .13 
HL .... 
1 0.00 .13 
co .... 
41 1.61 80 
DY ... 
1 0.00 .13 
FM ... 
10.00 .13 
HP .... 
1 0.00 .13 


CE .... 
32 1.51 .76 
FP .... 
1 0.00 .13 
HQ ... 
1 0.00 .13 


CA ..... 
20 1.30 .67 
EN .... 
111 2.05 .99 
FW ... 
1 0.00 .13 
HW ... 
1 0.00 .13 


CH .... 
14 1.15 .61 
ER .... 
87 1.94 .94 
FY .... 
I 0.00 .13 
HY ... 
1_9.00J.13 
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Table A-6 (U). The 428 digraphs of Table A-1, arranged in alphabetic order by initial letters, then by 
absolute frequencies, accompanied by the logarithms of their assigned probabilities (U) - 
Continued 


F LlO 1224 
F Lw L224 
F Lw L224 
F Lw 1224 


(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


IN .... 
75 1.88 .92 
LO .. :. 
13 1.11 .59 
ND 
. . 
52 1.72 .85 
OV . .. 
7 0.85 .48 


IO .... 
41 1.61 .80 
LY .... 
10 1.00 .55 
NI .... 
30 1.48 .75 
00 . .. 
6 0.78 .45 i 


IS . . . . 
35 1.54 .78 
LD .... 
9 0.95 . 53 
NG ... 
27 1.43 .73 
OI .... 
5 0.70 .42 
IR .... 
27 1.43 .73 
LT .... 
8 0.90 .51 
NA . .. 
26 1.41 .72 
OB .... 
40.60 .38 
IT .... 
27 1.43 .73 
LS .... 
6 0.78 .45 
NS .... 
24 1.38 .71 
OE .... 
3 0.48 .33 
IV .... 
25 1.40 .72 
LB .... 
3 0.48 .33 
NC .... 
19 1.28 .67 
OH . .. 
3 0.48 .33 
IL .... 
23 1.36 .70 
LC .... 
3 0.48 .33 
NO ... 
18 1.26 .66 
OG . .. 
20.30 .25 


IC .... 
22 1.34 .69 
LF .... 
3 0.48 .33 
NF .... 
9 0.95 . 53 
OK . .. 
2 0.30,.25 


IG .... 
19 1.28 .67 
l.P .... 
3 0.48 .33 
NN ... 
8 0.90 .51 
OY . .. 
210.30,.25 


IX .... 
15 1.18 .62 
LM ... 
2 0.30 .25 
NU 
7 0.85 .48 
OJ .... 
1 1o.oo 


1 
.13 


IE .... 
13 1.11 .59 
LR .... 
2 0.30 . 25 
NL .... 
5 0.70 .42 ox . .. 
IIO.OOI.l3 


IF .... 
10 1.00 .55 
LU .... 
2 0.30 .25 
NM ... 
5 0.70 .42 
IM .... 
9 0.95 .53 
LV .... 
20.30 .25 
NY ... 
5 0.70 .42 
PE .... 
23 1.361.70 


lA .... 
8 0.90 .51 
LW . . . 
2 0.30 .25 
NH . .. 
4 0.60 .38 
PR .... 
18 1.261.66 
IP .... 
7 0.85 .48 
LG .... 
1 0.00 .I3 
NR 
. .. 
4 0.60 .38 
PO .... 
17 I.23 .64 
ID .... 
60.78 .45 
LH .... 
1 0.00 .13 
NP 
. .. 
3 0.48 .33 
PA .... 
I4 1.15 .61 
IB .... 
20.30 .25 
LN .... 
1 0.00 .I3 
NV . .. 
3 0.481"33 
PL .... 
I3 l.IIJ.59 
IK .... 
2 0.30 .25 
NW ... 
3 0.48 .33 
PP .... 
11 I.04,.56 
IZ .... 
20.30 .25 
MA ... 
36 1.56 .78 
NB .... 
2 0.30 .25 
PT .... 
80.90,.51 


ME . . . 
26 1.41 .72 
NK ... 
2 0.30 .25 
PI . ... 
6 0.78 .45 
JE .... 
2 0.30 .25 
MM ... 
13 1.11 .59 
NJ .... 
1 0.00 .13 
PS .... 
6 0.78 .45 
JO .... 
2 0.30 .25 
MO ... 
10 1.00 .55 
NQ . .. 
I 0.00 .13 
PM .... 
4 0.60\.38 
JU .... 
2 0.30 .25 
MI .... 
9 0.95 .53 
PH .... 
I 
3 0.481.33 


JA .... 
10.00 .13 
MP .... 
8 0.90 .51 
PU .... 
3 0.48 .33 
MB . . . 
60.78 .45 
ON ... 
77 1.89 .92 
PF .... 
2 0.301.25 


KE .... 
6 0.78 .45 
MS .... 
4 0.60 .38 
OR . .. 
64 1.81 .89 
PB .... 
1 o.ooi.I3 
KI .... 
20.30 .25 
MC . .. 
·3 0.48 .33 
ou . .. 
37 1.57 .79 
PC .... 
1,0.00,.13 
KA . . . 
1 0.00 .13 
.MR ... 
2 0.30 .25 
OF .... 
25 1.40 .72 
PD .... 
I 0.00 .13 


KC .... 
10.00 . 13 
MT . . . 
2 0.30 .25 
OM ... 
25 1.40 .72 
PN .... 
1,0.00 .I3 
KL .... 
10.00 . 13 
MU ... 
2 0.30 .25 
OP .... 
25 1.40 .72 
PV .... 
1jo.ooj.I3 


KN ... 
1 0.00 . 13 
MY ... 
2 0.30 .25 
OL .... 
19 1.28 .67 
PW .... 
1 0.001.13 
KS .... 
10.00 .13 
MD ... 
10.00 .I3 
OT .... 
I9 1.28 .67 
PY .... 
1 0.00!.13 


MF ... 
1 0.00 .I3 
OS .... 
I4 1.15 .61 
I 


LE .... 
37 1.57 .79 
MH ... 
I 0.00 .13 
OD 
. .. 
12 1.08 .58 
LA .... 
28 1.45 .74 
oc .... 
80.90 .51 
QU . .. 
15 1.18 .62 
LL .... 
27 1.43 .73 
NT .... 
82 1.91 .93 
ow ... 
8 0.90 .51 
QM ... 
1 0.00 .13 
u . . . . 
20 1.30 .67 
NE .... 
57 1.76 .87 
OA 
... 
70.85 .48 
QR . .. 
1 0.00 .13 
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Table A-6 (£'). The 428 digraphs of Table A-1, arranged in alphabetic order by initial letters, then by 
absolute frequencies accompanied by the logarithms of their assigned probabilities (U) - 
Continued 


F 
110 1 224 
F 110 1 224 
F 
110 1224 
F 1110 
1224 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


RE .... 
98 1.99 .96 
SR · .... 
5 0.70 .42 
us .... 
12 1.08 .58 
XI .... 
2 0.30 .25 
RT .... 42 1.62 .81 
SN .... 
40.60 . 38 
UT .... 
12 1.08 .58 
XP .... 
2 0.30 .25 
RA . . . 39 1.59 .80 
sw .... 
40.60 .38 
UE .... 
11 1.04 .56 
XD ... 
1 0.00 .13 


RS .... 
31 1.49 .75 
SB .... 
3 0.48 .33 
UG ... 
8 0.90 .51 
XE .... 
110.00 .13 
RI .... 
30 1.48 .75 
SM .... 
3 0.48 . 33 
UL .... 
6 0.78 .45 
XF .... 
1 0.00 .13 


RO . . . 28 1.45 .74 
SG .... 
2 0.30 .25 
UA ... 
5 0.70 .42 
XH ... 
1 0.00 .13 
RD . . . 
17 1.23 .64 
SL .... 
2 0.30 .25 
Ul .... 
5 0.70 .42 
XN ... 
1 0.00 .13 
RP .... 
13 1.11 .59 
SK .... 
10.00 .13 
UM ... 
5 0.70 .42 
xo ... 
1 0.00 .13 
RR ... 
II 1.04 .56 sv .... 
10.00 .13 
UB .... 
3 0.48 .33 
XR . .. 
1 0.00 .13 


RC .... 
9 0.95 .53 
SY .... 
1 0.00 .13 
uc .... 
3 0.48 .33 
xs .... 
110.00 .13 
RM ... 
9 0.95 .53 
UD ... 
30.48 .33 


1511.181.62 
RY ... 
9 0.95 .53 
TH .... 
78 1.89 .92 
UP .... 
20.30 .25 
YT .... 
RG ... 
7 0.851.48 
TE .... 
71 1.85 .91 
UF .... 
1 0.00 .13 
YF .... 
11 1.04 .56 
RN . . . 
7 0.851.48 
TO .... 
so 1.70 .84 
uo ... 
10.00 .13 
YS .... 
I1il.04I.s6 


RF .... 
6 0.78.45 
TI .... 
45 1.65 .82 
uv . .. 
1 0.00 .13 
YO . .. 
10! l.ool.s5 


RL .... 
5 0.701.42 
TY .... 
41 1.61 .80 
YE .... 
910.95\.53 
RU 
5 0.70.42 
TW ... 
36 1.56 .78 
VE .... 
57 1.76 .87 
YA 
I 
I 
. . . 
... 
6!0.781.45 


RV . . . 
510.701.42 
TA .... 
28 1.45 .74 
VI .... 
12 1.08 .58 
YN ... 
610.78 .45 
RW ... 
4 0.60.38 
TS .... 
19 1.28 .67 
VA . .. 
6 0.78 .45 
YC .... 
40.60[.38 


RH . . . 
310.48 1.33 
IT .... 
19 1.28 .67 
vo . . . 
1 0.00 .13 
YD ... 
410.60.38 


RB .... 
T.30 .25 
TR .... 
17 1.23 .64 
VT .... 
1 0.00 .13 
YR . .. 
4 0.601.38 


RJ .... 
I 0.00 .13 
TF .... 
7 0.85 .48 
YI .... 
3 0.481.33 


RK . . . 
1 0.00.13 
TN .... 
7 0.85 .48 
WE ... 
22 1.34 .69 
yp .... 
310.48 .33 


TC .... 
6 0.781.45 
WO ... 
19 1.28 .67 
YB .... 
2 0.30 .25 


ST .... 
63 1.80 .88 
TD .... 
6 0.78 .45 
WI .... 
13 1.11 .59 
YL .... 
2 0.301.25 
SE ..... 49 1.69 .84 
TM ... 
6 0.78 .45 
WA ... 
12 1.08 .58 
YM ... 
2 0.30,.25 
SI . . . . 34 1.53 .77 
TL .... 
5 0.70 .42 
WH ... 
40.60 .38 
YG ... 
110.00.13 
SH .... 
26 1.41 .72 
TU .... 
5 0.70 .42 
WN ... 
2 0.30 .25 
YH . .. 
1 0.001.13 
SA .... 
24 1.38 .71 
TB .... 
3 0.48 .33 
WL ... 
10.00 .13 
YU . .. 
110.00 .13 
ss .... 
19 1.28 .67 
TP .... 
2 0.30 . 25 
WR ... 
10.00 .13 
YW ... 
110.00 .13 
so .... 
15 1.18 .62 
TG .... 
10.00 .13 
WS .... 
10.00 .13 
I 
sc .... 
13 1.11 . 59 
TQ .... 
1 0.00 .13 
WY ... 
1 0.00 .13 
ZE .... 
210.30 .25 
SF .... 
12 1.08 .58 
TZ .... 
10.00 .13 
ZA.... 
r.OO .13 
su .... 
11 1.04 . 56 
XT .... 
7 0.85 .48 
ZI ... _. _1 0.00113 
SP .... 
10 1.00 . 55 
UR ... 
31 1.49 .75 
XA ... 
2 0.30 .25 
5,000 
SD .... 
5 0.70 .42 
UN ... 
21 1.32 .68 
XC .... 
2 0.30 .25 
i 
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Table A-7 (e). The 428 digraphs of Table A-1, arranged in alphabetic order by fmal letters, then by 
absolute frequency, accompanied by the logarithms of their assigned probabilities (U) 


F 1'-10 
L224 
F 
LlO L224 
F ILiO 
L224 
F JLIO 
1 224; 


KF> 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) i 


RA ... 
39 1.59 .80 
EC .... 
32 1.51 .76 
RE .... 
98 1.99 .96 
GF .... 
2 0.30 .25 
MA ... 
36 1.56 .78 
IC . : . . 
22 1.34 .69 
TE .... 
71 1.85 .91 
PF .... 
2 0.30 .25 
EA .... 
35 1.54 .78 
NC .... 
19 1.28 .67 
NE .... 
57 1.76 .87 
CF .... 
1 0.00 .13 
DA . . . 
32 1.51 .76 
AC .... 
14 1.15 .61 
VE .... 
57 1.76 .87 
MF ... 
1 0.00 .13 
LA .... 
28 1.45 .74 
sc .... 
13 1.11 .59 
SE .... 49 1.69 .84 
UF .... 
1 0.00 .13 
TA .... 
28 1.45 .74 
RC .... 
9 0.95 .53 
EE .... 
42 1.62 .81 
XF .... 
1 0.00 .13 
NA ... 
26 1.41 . 72 
oc .... 
80.90 .51 
LE .... 
37 1.57 .79 


SA .... 
24 1.38 .71 
TC .... 
60.78 .45 
DE .... 
33 1.52 .77 


CA .... 
20 1.30 . 67 
DC .... 
40.60 .38 
CE .... 
32 1.51 .76 
NG . .. 
27 1.43 .73 
HA . . . 20 1.30 . 67 
YC .... 
40.60 .38 
ME ... 
26 1.41 .72 
IG .... 
19 1.28 .67 
PA .... 
14 1.15 . 61 
cc .... 
3 0.48 .33 
PE .... 
23 1.36 .70 
UG . .. 
8 0.90 .51 
WA ... 
12 1.08 . 58 
HC .... 
3 0.48 .33 
WE . . . 
22 1.34 .69 
RG . .. 
7 0.85 .48 
IA .... 
8 0.90 . 51 
LC .... 
3 0.48 .33 
HE .... 
20 1.30 .67 
AG . .. 
6 0.78 .45 : 
GA . . . 
'7 0.85 .48 
MC ... 
3 0.48 .33 
BE .... 
18 1.26 .66 
EG .... 
4 0.60 .38 
i 


OA . . . 
7 0.85 .48 
uc .... 
3 0.48 .33 
GE .... 
14 1.15 .61 
DG ... 
2 0.30 .25 


VA ... 
6 0.78 .45 
FC .... 
2 0.30 . 25 
IE .... 
13 1.11 .59 
OG ... 
210.30 .25 


YA ... 
6 0.78 .45 
GC .... 
2 0.30 .25 
UE .... 
11 1.04 .56 
SG .... 
2 0.30j.25 


FA .... 
5 0.70 .42 
XC .... 
20.30 .25 
FE .... 
10 1.00 .55 
FG .... 
1 0.00 .13 


UA . . . 
5 0.70 .42 
KC .... 
1 0.00 .13 
YE .... 
9 0.95 .53 
GG ... 
1 0.00 .13 
BA .... 
40.60 . 38 
PC .... 
1 0.00 . 13 
KE .... 
6 0.78 .45 
LG .... 
1 0.00 .13 
AA ... 
3 0.48 .33 
OE .... 
3 0.48 .33 
TG .... 
1 0.00 .13 
XA . . . 
20.30 .25 
JE .... 
2 0.30 .25 
YG ... 
1 0.00 .13 
JA .... 
10.00 .13 
ED .... 
60 1.78 .88 
ZE .... 
2'0.30 .25 
KA 
I 0.00 .13 
ND 
52 1.72 .85 
AE ..... 
1 0.00 .13 
' 
. . . 
... 


ZA .... 
10.00 .13 
AD . .. 
27 1.43 .73 
XE .... 
1 0.00 .13 
RD ... 
17 1.23 .64 
TH .... 
78 1.89 .92 
i 
AB .... 
6 0.78 .45 
OD . .. 
12 1.08 .58 
SH- .... 
26 1.41 .72 
MB . . . 
6 0.78 .45 
LD .. · .. 
9 0.95 .53 
GH ... 
20 1.301.67 : 
DB .... 
40.60 .38 
DD . .. 
8 0.90 .51 
OF .... 
25 1.40 .72 
CH .... 
14 1.15,.61 


EB .... 
40.60 .38 
ID .... 
6 0.78 .45 
EF .... 
18 1.26 .66 
EH .... 
7 0.85 .48 


OB .... 
40.60 .38 
TD .... 
6 0.78 .45 
SF .... 
12 1.08 .58 
NH . .. 
4 0.601.38 


LB .... 
3 0.48 .33 
SD .... 
5 0.70 .42 
FF .... 
11 1.04 .56 
WH ... 
4 0.60 .38 


SB .... 
3 0.48 .33 
YD . . . 
4 0.60 .38 
YF .... 
11 1.04 .56 
OH . .. 
3 0.48 .. 33 
TB .... 
30.48 .33 
UD . .. 
3 0.48 .33 
IF .... 
10 1.00 .55 
PH .... 
3 0.481.33 


UB .... 
3 0.48 .33 
HD . . . 
2 0.30 .25 
NF .... 
9 0.95 .53 
RH . .. 
3 0.48 .33 
IB 
• 
0 
0 
0 
2 0.30 .25 
CD .... 
I 0.00 .13 
DF .... 
80.90 .51 
AH ... 
2 0.30 .25 


NB .... 
2 0.30 . 25 
FD .... 
1 0.00 .13 
TF .... 
7 0.85 .48 
DH . .. 
2 0.30 .25 
RB .... 
2 0.30 .25 
GD . .. 
1 0.00 . 13 
RF .... 
6 0.78 .45 
LH .... 
1 0.00 .13 


YB .... 
2 0.30 . 25 
MD ... 
I 0.00 .13 
HF .... 
5 0.70 .42 
MH ... 
I 0.00 .13 
HB .... 
10.00 . 13 
PD .... 
I 0.00 .13 
AF .... 
4 0.60 .38 
XH . .. 
I 0.00 .13 
PB .... 
I 0.00 .13 
XD . . . 
I 0.00 . 13 
LF .... 
30.48 .33 
YH . .. 
I 0.00 .13 
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Table A-7 (.e5. The 428 digraphs of Table A-1, arranged in alphabetic order by fmal letters then by 
absolute frequency, accompanied by the logarithms of their assigned probabilities (U) - 
Continued 


F 110 1224 
F 
110 1224 
F 110 1224 
F 110 1224 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


TI .... 
45 1.65 .82 
LL· .... 
27 1.43 .73 
AN ... 
64 1.81 .89 
RP .... 
1311.11 .59 
FI .... 
39 1.59 .80 
IL .... 
23 1.36 .70 
UN ... 
21 1.32 .68 
AP .... 
12 1.08 .58 


SI . . . . 
34 1.53 .77 
OL .... 
19 1.28 .67 
NN ... 
8 0.90 .51 
pp .... 
1111.04.56 


HI .... 
33 1.52 .77 
PL .... 
13 1.11 .59 
RN ... 
7 0.85 .48 
SP .... 
10 1.00 .55 
NI .... 
30 1.48,.75 
BL .... 
6 0.78 .45 
TN .... 
7 0.85 .48 
MP .... 
810.90 .51 
Rl .... 
30 1.48.75 
UL .... 
60.78 .45 
YN ... 
60.78 .45 
IP .... 
7 0.85 .48 
DI .... 
27 1.43 .73 
CL .... 
5 0.70 .42 
DN ... 
40.60 .38 
DP .... 
5,0.70 .42 
EI .... 
27 1.43 .73 
NL .... 
5,0.70 .42 
SN . . . . 
4 0.60,.38 
LP .... 
3 0.48 .33 
u .... 
20 1.30 .67 
RL .... 
5,0.70 .42 
GN . .. 
3 0.48,.33 
NP .... 
3:0.48,.33 


AI .... 
17 1.23 . 64 
TL .... 
5 0.70 .42 
HN ... 
3 0.48 .33 
yp .... 
3;0.48 .33 
WI .... 
13 1.11 . 59 
DL .... 
3 0.48 .33 
WN ... 
2 0.30 .25 
GP .... 
2!0.301.25 


VI .... 
12 1.08 .58 
FL .... 
2 0.30 .25 
CN .... 
I 0.00 .13 
TP .... 
2!0.301.25 


MI .... 
9 0.95 .53 
GL .... 
2 0.30 .25 
KN . . . 
I 0.00 .13 
UP .... 
2:0.301.25 
CI .... 
7 0.85j.48 
SL .... 
2 0.30 .25 
LN .... 
I 0.00 .13 
XP .... 
210.30(5 
PI .... 
6 0.78,.45 
YL .... 
2 0.30 .25 
PN .... 
I 0.00 .13 
FP .... 
I 0.00.13 


GI .... 
5 0.70,.42 
HL .... 
1.0.00 .13 
XN . . . 
I 0.00 .13 
HP .... 
10.00.13 
01 .... 
5 0.70.42 
KL .... 
IIO.OO .13 


1.081.58 
UI .... 
5 0.70 .42 
WL ... 
I 0.00 .13 
EQ .... 
12 
YI .... 
3 0.48 .33 
TO .... 
50 1.70 .84 
DQ ... 
2 0.30j.25 


BI .... 
2 0.30 .25 
co .... 
41 1.61 .80 
HQ ... 
1 0.00 .13 
K1 .... 
2 0.30 .25 
OM ... 
25 1.40 .72 
10 .... 
41 1.61 .80 
NQ ... 
1 0.00 .13 
XI .... 
2 0.30 .25 
AM ... 
1411.15 . 61 
FO .... 
40 1.60 .80 
TQ .... 
I 0.00 .13 


ZI .... 
1 0.00 .13 
EM ... 
14 1.15 .61 
RO ... 
28 1.45 .74 
MM ... 
13 1.11 .59 
HO ... 
20 1.30 .67 
ER .... 
87 1.94 .94 
IM .... 
9 0.95 .53 
WO ... 
19 1.28 .67 
OR ... 
64 1.81 .89 
AJ .... 
10.00 .13 
RM .... 
90.95 .53 
NO ... 
18 1.26 .66 
AR . .. 
44 1.64 .82 
BJ .... 
I 0.00 .13 
TM ... 
6 0.78 .45 
PO .... 
17 1.23 . 64 
UR . .. 
31 1.49 .75 
DJ .... 
1 0.00 . 13 . DM ... 
5 0.70 .42 
DO ... 
16 1.20 .63 
IR .... 
27 1.431.73 
EJ .... 
1 0.00 .13 
NM ... ro 


.42 
so .... 
15 1.18 .62 
PR .... 
18 1.26 .66 
GJ .... 
1 0.00 .13 
UM ... 
0.70 .42 
LO .... 
13 1.11 .59 
HR ... 
17 1.23 .64 
NJ .... 
I 0.00 . 13 
PM .... 
0.60 .38 
EO .... 
12 1.08 .58 
TR .... 
17 1.23 i.64 
OJ .... 
I 0.00 .13 
SM .... 
0.48 .33 
MO ... 
10 1.00 .55 
DR ... 
12 1.081.58 


RJ .... 
1 0.00 . 13 
HM ... 
~ 0.30 .25 
YO ... 
lO 1.00 .55 
RR . .. 
11 1.041.56 


LM ... 
2 0.30 .25 
GO ... 
60.78 .45 
FR .... 
9 0.95 .53 


CK .... 
4 0.60 .38 
YM ... 
2 0.30 .25 
00 ... 
60.78 .45 
GR 
. .. 
5 0.70 .42 
AK . . . 
2 0.30 .25 
BM ... 
1 0.00 .13 
BO .... 
40.60 .38 
SR .... 
5 0.70 .42 
IK .... 
2 0.30 .25 
CM ... 
I 0.00 .13 
AO . .. 
2 0.30 .25 
CR .... 
4 0.60 .38 
NK . . . 
2 0.30 .25 
FM ... 
I 0.00 .13 
JO .... 
2 0.30 .25 
NR . .. 
4 0.601.38 
OK . . . 
2 0.30 .25 
GM ... 
1 0.00 . 13 
uo ... 
1 0.00 .13 
YR ... 
4 0.60 .38 
RK . . . 
1 0.00 .13 
QM ... 
1 0.00 .13 
vo . . . 
1 0.00 .13 
BR .... 
2 0.301.25 
SK .... 
1 0.00 .13 
xo . . . 
1 0.00 .13 
LR .... 
2 0.30 .25 
MR ... 
2 0.30 .25 
EN .... Ill 2.05 .99 
QR ... 
1 0.00 .13 ' 
AL .... 
32 1.51 .76 
ON ... 
77 1.89 .92 
OP .... 
25 1.40 .72 
WR ... 
1 0.00 .13 I 
EL .... 
29 1.46 .74 
IN .... 
75 1.88 .92 
EP .... 
20 1.30 .67 
XR ... 
1 0.00 .13 
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Table A-7 W, The 428 digraphs of Table A-1, arranged in alphabetic order by fmal letters, then 
according to their absolute frequency, accompanied by the logarith~s of their assigned 
probabilities (U)- Cant inued 


F Lw L224 
F LlO L224 
F LlO 
L224 
F fLlO 
L224 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
F) 
(2F) 


OT ... : 


I 
ES .... 
54 1.731.86 
19 1.28 .67 
JU .... 
2 0.30 .25 
P\V .... 
1 0.00f.13 
AS .... 41 1.61 .80 
TT .... 
19 1.28 .67 
LU .... 
20.30 .25 
YW ... 
1 o.oo;.13 
IS .... 
35 1.54 . 78 
DT .... 
15 1.18 .62 
MU ... 
2 0.30 .25 


1.18 1.62 
RS .... 
31 1.49 .75 
YT .... 
15 1.18 .62 
YU ... 
1 0.00 .13 
IX .... 
15 


NS .... 
24 1.38 .71 
CT .... 
14 1.15 .61 
EX .... 
7)0.85 i.48 
ss .... 
19 1.28 .67 
UT .... 
12 1.08 .58 
IV .... 
25 1.40 .72 
ox ... 
110.00(.13 
TS .... 
19 1.28 .67 
FT .... 
11 1.04 .56 
EV .... 
20 1.30 .67 


OS .... 
14 1.15 .61 
LT .... 
8 0.90 .51 
AV ... 
7 0.85 .48 
TY .... 
41 1.61 .80 
DS .... 
13 1.11 .59 
PT .... 
80.90 .51 
ov ... 
7 0.85 .48 
AY . .. 
12 1.08 .58 
us .... 
12 1.08 .58 
XT .... 
70.85 .48 
RV ... 
5 0.70 .42 
LY .... 
10 1.00 .55 


YS .... 
11 1.04 .56 
GT .... 
40.60 .38 
DV ... 
3 0.48 .33 
RY . .. 
9 0.95 .53 
LS .... 
6 0.78 .45 
MT . . . 
2 0.30 .25 
NV . .. 
3 0.48 .33 
BY .... 
7 0.85 .48 
PS .... 
6 0.78 .45 
BT .... 
1 0.00 .13 
LV .... 
2 0.30 .25 
NY . .. 
5 0.70 .42 


HS .... 
40.60 .38 
VT .... 
1 0.00 .13 
PV .... 
10.00 .13 
EY .... 
4 0.60 .38 


MS .... 
40.60 .38 
SV .... 
1 0.00 .13 
MY ... 
2 0.30 .25 


FS .... 
3 0.48 .33 
ou . . . 
37 1.57 .79 
uv ... 
1 0.00 .13 
OY . .. 
210.30 .25 


GS .... 
3 0.48 .33 
QU . .. 
15 1.18 .62 
CY .... 
1 0.00,.13 
BS .... 
1 0.00 .13 
AU . . . 
13 1.11 .59 
TW . . . 
36 1.56 .78 
DY . .. 
110.00 .13 
cs .... 
10.00 . 13 
su .... 
11 1.04 .56 
OW ... 
8 0.90 .51 
FY .... 
1roo1.13 


KS .... 
1 0.00 .13 
HU . . . 
8 0.90 .51 
EW . . . 
710.851.48 
HY ... 
1 0.001.13 
ws .... 
1 0.00 .13 
NU . .. 
7 0.85 .48 
DW ... 
4 0.60.38 
py .... 
1 0.00 .13 
xs .... 
10.00 .13 
DU . .. 
5 0.70 .42 
RW ... 
40.60 .38 
SY .... 
1 0.001.13 
RU ... 
5 0.70 .42 
SW .... 
40.60 .38 
WY ... 
1 0.00 .13 
NT .... 82 1.91 .93 
TU .... 
5 0.70 .42 
AW ... 
3 0.48 .33 


ST .... 
63 1.80 .88 
cu .... 
40.60 .38 
NW ... 
3 0.48 .33 
IZ .... 
2 0.301.25 


AT .... 47 1.67 .83 
EU .... 
3 0.48 .33 
LW ... 
2 0.30 .25 
EZ .... 
1 0.00 .13 
RT .... 42 1.62 .81 
FU .... 
30.48 . 33 
cw ... 
1 0.00 .13 
TZ .... 
10.00 .13 
ET .... 
37 1.57 .79 
PU .... 
3 0.48 .33 
FW ... 
1 0.00 .13 
5,000 


HT .... 28 1.45 .74 
BU .... 
20.30 .25 
GW ... 
1 0.00 .13 
IT .... 
27 1.43 .73 
GU . .. 
2 0.30 .25 
HW ... 
1 0.00 .13 
-- 
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TableA-8 (J2{ The 18 digraphs composing 25% of the digraphs ofTable A-1, accompanied by the logarithms of 
their assigned probabilities, arranged alphabetically by final letters (U) 


(1) AND ACCORDING TO THEIR INITIAL 


LETTERS 


F 
LlO I L224 
F 
LlO 
(F) : (2F) 
(F) 


ED .... 
60 1.78:.88 
IN .... 
75 1.88 
ND . . . 
5211.12;.8s 
ON ... 
77 1.89 


NE .... 
I 
; 


57[1.76 .87 
TO .... 
so 1.70 


RE .... 
98!1.99:.96 
SE .... 
4911.69!.84 
ER .... 
87 1.94 
TE .... 
71,1.85:.91 
OR ... 
64 1.81 


VE .... 
57'1.76).87 
I 
ES .... 
54 1.73 
TH .... 
7811.89•.92 


! 
NT .... 
82 1.91 
AN . . . 
64 1.81; 1:89 
ST . . . . 
63 1.80 


EN .... 
111 2.05 .99 
1,249 


L224 
(2F) 


. 92 
.92 


.84 


.94 
. 89 


.86 


.93 
.88 


(2) AND ACCORDING TO THEIR ABSOLUTE 
FREQUENCIES 


F 
LlO 
L224 
F 
L10 /L224 
(F) 
(2F) 
(F) 
)(2F) 


ED .... 
60 1.78 .88 
IN .... 
7511.88[.92 
ND . .. 
52 1.72 .85 
AN . .. 
64! 1.81,.89 


1.99 


I 
RE .... 
98 
.96 
TO .... 
5011.70 .84 
TE .... 
71 1.85 .91 
NE .... 
57 1.76 .87 
ER .... 
87 1.94 .94 
VE .... 
57 1.76 .87 
OR 
. . . 
64 1.811.89 I 
SE .... 
49 1.69 .84 
I 
ES . . . . 
54 1.73'.86 
I 


TH .... 
78 1.89.92 
I 
~ 
NT . . . . 
82)1.91 .93 
EN .... 
111 2.0~1:99 
ST ... ~jl.80 .88 


ON ... 
11 1.89 ~ 
·--- _ J.24~L_L 


Table A-9 ~.The 53 digraphs composing 50% of the digraphs of Table A-1, accompanied by the logarithms of 
their assigned probabilities, arranged alphabetically by final letters (U) 


(1) AND ACCORDING TO THEIR INITIAL LETTERS 


F 
LlO L224 
F LlO L224 
F 
I 
F i L 10 I L224 
L1o 
Lz24 


(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
; (F) 
1 (2F) 
' 
i 
DA . . . 
32 1.51 .76 
NE .... 
57 1.76 .87 
AN ... 
64 1.81 .89 
AS .... 
41[1.61!.80 


EA .... 
35 1.54 .78 
RE .... 
98 1.99 .96 
EN .... 
111 2.05 .99 
ES .... 
54! 1.73 
1.86 


LA .... 
28 1.45 .74 
SE .... 
49 1.69 .84 
IN .... 
75 1.88 .92 
IS 
. ... 
3511.541.78 


MA . . . 
36 1.56 .78 
TE .... 
71 1.85 .91 
ON ... 
77 1.89 .92 
RS .... 
31j1.49i.75 


RA ... 
39 1.59 .80 
VE .... 
57 1.76 .87 
: 
I 


TA .... 
28 1.45 .74 
AT .... 
47! 1.671.83 


TH .... 
78 1.89 .92 
co .... 
4111.61 .80 
ET .... 
37)1.571.79 
EC .... 
32 1.51 .76 
FO .... 
40 1.60 .80 
HT .... 
2811.451.74 


FI .... 
39 1.59 . 80 
10 .... 
41 1.61 .80 
NT .... 
82)1.91 '.93 
HI .... 
33 1.52 .77 
RO . . . 
28 1.45 .74 
RT .... 
42[1.62 .81 
ED .... 
60 1.78 .88 
Nl .... 
30 1.48 .75 
TO .... 
50 1.70 .84 
ST .... 
63[1.80 .88 
ND 
52 1.72 .85 
RI .... 
30 1.48 .75 


I 
... 


37! 1.571.79 
SI .... 
34 1.53 .77 
ou . .. 
TI .... 
45 1.65 .82 


CE .... 
32 1.51 .76 
AR ... 
44 1.64 .82 
TW . .. 
36 1.56 .78 
DE .... 
33 1.52 .77 
ER .... 
87 1.94 .94 
EE .... 42 1.62 .81 
AL .... 
32 1.51,.76 
OR ... 
64 1.81 .89 
TY . . . . 
41 1.61 .80 


LE .... 
37 1.57 .79 
EL .... 
29 1.46 .74 
UR ... 
31 1.49 .75 
2,4951 
I 


rANIFIAS'NTIAI 
· 
A-15 


A-16 


-sONF"IDENTIAb 


Table A-9 (9'[. The 53 digraphs composing 50% of the digraphs of Table A-1, accompanied by the 
logarithms of their assigned probabilities, arranged alphabetically by final letters (U) - 
Continued 


(2) AND ACCORDING TO THEIR ABSOLUTE FREQUENCIES 


F Lw L224 
F 
LlO L224 
F 
L10 L224 
F L10 L224 
F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


RA ... 
39 1.59 .80 
EE .... 
42 1.62 .81 
£N .... 
Ill 2.05 .99 ES .... 
54 1.73 .86 
MA ... 
36 1.56 .78 
LE .... 
37 1.57 .79 
ON ... 
77 1.89 .92 AS .... 
41 1.61 .80 


EA .... 
35 1.54 .78 
DE .... 
33 1.52 .77 
IN .... 
75 1.88 .92 IS .... 
35 1.54:.78 
DA ... 
32 1.51 .76 
CE .... 
32 1.51 .76 
AN . .. 
64 1.81 .89 RS .... 
31 1.49i.75 
LA .... 
28 1.45 .74 
I 


TA .... 
28 1.45 . 74 
~T .... 
82 1.911.93 
TH .... 
78 1.89 . 92 
TO .... 
50 1.70 .84 ST .... 
63 1.80 .88 


EC .... 
32 1.51 .76 
.co .... 
41 1.61 .80 AT .... 
47 1.67 i.83 
10 .... 
41 1.61 ,80 RT .... 
42 1.62 i.8l 
TI .... 
45 1.65 .82 
FO .... 
40 1.60 .80 ET .... 
37 1.57 i.79 
ED .... 
60 1.78 .88 
FI .... 
39 1.59 .80 
RO . .. 
28 1.45 .74 HT .... 
28 1.451.74 


ND . . . 52 1.72 .85 
SI .... 
34 1.53 .77 
HI .... 
33 1.52 .77 
ou ... 
37 1.571.79 


RE .... 
98 1.99 .96 
NI .... 
30 1.48 .75 
I 
TE .... 
71 1.85 .91 
RI .... 
30 1.48 .75 
ER .... 
87 1.94 .94 TW ... 
36 1.56 . 78 
NE .... 
57 1.76 .87 
OR . .. 
64 1.81 .89 


VE .... 
57 1.76 .87 
AL .... 
32 1.51 .76 
AR . .. 
44 1.64 .82 TY .... 
41 1.61 .80 
SE .... 
49 1.69 .84 
EL .... 
29 1.46 .74 
UR . .. 
31 1.49 .75 
2,495 


Table A-10 (rA. The 122 digraphs composing 75% of the digraphs of Table A-1, accompanied by the 
. ! f 
logarithms of their assigned probabilities, arranged alphabetically by final letters (U) 


(I) AND ACCORDING tO THEIR INITIAL LETTERS 


F Lw L224 
F L1o L224 
F L1o L224 
F I Lw Ln4 


(F) 
(2F) 
(F) 
(2F) 
F) 
(2F) 
(F) 
(2F) 


I 
CA .... 
20 1.30 .67 
ND ... 
52 1.72 .85 
EF .... 
18 1.26 .66 
SI . ... 
34! 1.53 .77 
DA . . . 
32 1.51 .76 
RD ... 
17 1.23 .64 
OF .... 
25 1.40 .72 
TI .... 
45 1.65 .82 
EA .... 
35 1.54 .78 
I 
HA ... 
20 1.30 .67 
BE .... 
18 1.26 .66 
IG .... 
19 1.28 .67 
AL .... 
32(51 .76 
LA .... 
28 1.45 . 74 
CE .... 
32 1.51 .76 
NG . .. 
27 1.43 .73 
EL .... 
29 1.46 .74 
MA ... 
36 1.56 .78 
DE .... 
33 1.52 .77 
IL .... 
23 1.36!.70 
NA . . . 
26 1.41 .72 
EE .... 
42 1.62 .81 
CH .... 
14 l.l5 .61 
LL .... 
27 1.43 .73 
PA .... 
14 l.l5 .61 
GE .... 
14 l.l5 .61 
GH ... 
20 1.30 .67 
OL .... 
19 1.28 .67 
RA ... 
39 1.59 .80 
HE .... 
20 1.30 .67 
SH .... 
26 1.41 .72 


SA .... 
24 1.38 .71 
IE .... 
13 1.11 .59 
TH .... 
78 1.89 .92 
TA .... 
28 1.45 .74 
LE .... 
37 1.57 .79 
AM ... 
14 1.15 .61 
ME ... 
26 1.41 .72 
AI .... 
17 1.23 .64 
EM . .. 
14;1.15 .61 


AC .... 
14 1.15 .61 
NE .... 
57 1.76 .87 
DI .... 
27 1.43 .73 
OM ... 
2511.40 .72 


EC .... 
32 1.51 .76 
PE .... 
23 1.36 .70 
EI .... 
27 1.43 .73 


IC .... 
22 1.34 . 69 
RE .... 
98 1.99 .96 
FI .... 
39 1.59 .80 
AN 
. .. 
64 1.81 .89 


NC .... 
19 1.28 .67 
SE .... 
49 1.69 .84 
HI .... 
33 1.52 .77 
EN .... 
Ill 2.05 .99 
TE .... 
71 1.85 . 91 
u .... 
20 1.30 .67 
IN .... 
75 1.88 .92 


AD ... 
27 1.43 .73 
VE .... 
57 1.76 .87 
NI .... 
30 1.48 .75 
ON . .. 
77 1.89 .92 


ED .... 
60 1.78 .88 
WE ... 
22 1.34 .69 
Rl .... 
30 1.48 .75 
UN 
. .. 
21 1.32 .68 


..C:nNF"In~NTIAL: 
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Table A-10 }4. The 122 digraphs composing 75% of the digraphs of Table A-1, accompanied by the 
logarithms of their assigned probabilities, arranged alphabetically by final letters (U) - 
Continued 


(1) AND ACCORDING TO THEIR INITIAL LETTERS- Continued 


F Lw L224 
F LlO L224 
F LlO L224 
F LIO L224 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
co .... 
41 1.61 .80 
AR ... 
44 1.64 .82 
RS .... 
31 1.49 .75 
IT .... 
·19 1.28 .67 


DO 
•• 0 
16 1.20 .63 
ER .... 
87 1.94 .94 
ss .... 
19 1.28 .67 
YT 
00 00 
15 1.18 .62 


FO .... 
40 1.60 .80 
HR ... 
17 1.23 .64 
TS .... 
19 1.28 .67 


HO . . . 
20 1.30 .67 
IR .... 
27 1.43 .73 
AU 
• 
0 
• 
13 1.11 .59 


10 .... 
41 1.61 .80 
OR . .. 
64 1.81 .89 
ou 
0 
•• 
37 1.57 .79 


LO .... 
13 1.11 .59 
PR .... 
18 1.26 .66 
QU 
• 
• 
0 
15 1.18 .62 


NO ... 
18 1.26 .66 
TR .... 
17 1.23 .64 
AT .... 
47 1.67 .83 


2011.30 
PO .... 
17 1.23 .64 
UR ... 
31 1.49 .75 
CT .... 
14 1.15 .61 
EV .... 
.67 


RO ... 
28 1.45 .74 
DT .... 
15 1.18 .62 
IV .... 
25jl.40 .72 
so .... 
15 1.18 .62 
ET .... 
37 1.57 .79 


TO .... 
50 1.70 .84 
AS .... 
41 1.61 .80 
HT 
0000 
28 1.45 .74 
TW 
0 
0 
0 
36 1.56 .78 
wo ... 
19 1.28 .67 
DS .... 
13 1.11 .59 
IT .... 
27 1.43 .73 
ES .... 
54 1.73 .86 
NT 
00 00 
82 1.91 .93 
IX .... 
15 1.18 .62 
IS .... 
35 1.54 .78 
OT .... 
19 1.281.67 
EP .... 
20 1.30 .67 
NS 
oo .. 
24 1.38 .71 
RT .... 
42 1.6~1·81 
TY . . . . 
41 1.61 .80 
OP .... 
25 1.40 .72 
OS .... 
14 1.15 .61 
ST .... 
63 1.80 .88 
3,745 
-- 


(2) AND ACCORDING TO THEIR ABSOLUTE FREQUENCIES 


F 
LlO L224 
F LlO L224 
F LlO 1224 
F 
LlO L224 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


RA 
• 
0. 
39 1.59 .80 
RE .... 
98 1.99 .96 
TH 
0000 
78 1.89 .92 
OM 
• 
0 
0 
25 1.40 .72 
MA ... 
36 1.56 78 
TE .... 
71 1.85 .91 
SH .... 
26 1.41 .72 
AM 
• 
0 
0 
14 1.15 .61 
EA .... 
35 1.54 .78 
NE .... 
57 1.76 .87 
GH 
•• 0 
20 1.301.67 
EM ... 
14 1.15 .61 
DA ... 
32 1.51 . 76 
VE .... 
57 1.76 .87 
CH .... 
14 1.15 .61 
LA .... 
28 1.45 74 
SE .... 
49 1.69 .84 
EN .... 
11112.05 .99 
TA .... 
28 1.45 .74 
EE .... 
42 1.62 .81 
ON 
• 
0 
0 
77 1.89 .92 
NA . . . 26 1.41 .72 
LE .... 
37 1.57 .79 
TI 
•• 0 
• 
45 1.65 .82 
IN .... 
75 1.88 .92 
SA .... 
24 1.38 .71 
DE .... 
33!1.52 .77 
FI .... 
3911.59 .80 
AN 
• 
0. 
64 1.81 .89 


CA .... 
20 1.30 .67 
CE .... 
32 11.51 .76 
SI 
•. 0. 
34 1.53 .77 
UN 
• 
• 
0 
21 1.32 .68 
HA . . . 20 1.30 .67 
ME ... 
26 1.41 .72 
HI .. 00 
33 1.52 .77 


PA .... 
14 1.15 .61 
PE .... 
23 1.36 .70 
NI .... 
30 1.48(5 
TO .... 
50 1.70 .84 
WE 
• 
0 
0 
22 1.34 .69 
RI 
00 00 
30 1.48 .75 
co 
00 
0 
0 
41 1.61 .80 
EC .... 
32 1.51 .76 
HE 
oo .. 
20 1.30 .67 
DI .... 
27 1.43 .73 
IO . 0 
0 
0 
41 1.61 .80 
IC 
• 0. 0 
22 1.34 .69 
BE .... 
18 1.26 .66 
EI 
0. 
0 
• 
27 1.43 .73 
FO .... 
4011.60 .80 
NC .... 
19 1.28 . 67 
GE .... 
14 1.15 .61 
u 
0 
••• 
20 1.30 .67 
RO 
• 
0 
0 
28 1.45 .74 


AC .... 
14 1.15 .61 
IE .... 
13 1.11 .59 
AI . 00. 
17 1.23 .64 
HO 
• 
0 
0 
2011.30 .67 
wo 
• 
0 
0 
19 1.28 .67 


OF .... 
25 1.40 .72 
AL 
0000 
32 1.51 .76 
NO 
• 
0 
0 
18 1.26 .66 
ED .... 
60 1.78 .88 
EF .... 
18 1.26 .66 
EL .... 
29 1.46 .74 
PO 
00 00 
17 1.23 .64 
ND ... 52 1.72~85 
LL .... 
27 1.43 .73 
DO 
0 
0 
0 
16 1.20 .63 
AD 
0. 0 
27 1.43 .73 
NG 
•• 0 
27 1.43 .73 
IL .... 
23 1.36 .70 
so . 0. 0 
15 1.18 .62 
RD 
• 
0. 
17 1.23 64 
IG .... 
19 1.28 .67 
OL .... 
19 1.28 .67 
LO .... 
13 1.11 .59 


~AN 
I:"' I ni:'"N"T'IAI 
A-17 


A-18 


-PANr:'lni:'NTI:l\1 
.. 


Table A-10 f,e{ The 122 digraphs composing 75% of the digraphs of Table A-1, accompanied by the 
logarithms of their assigned probabilities, arranged alphabetically by fmalletters (U) - 
Continued 


(2) AND ACCORDING TO THEIR ABSOLUTE FREQUENCIES-Continued 


F I LlO L224 
F Lto L224 
F Lto L224 
F Lw L224 
F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 
(F) 
(2F) 


OP .... 25 1.40 .72 
ES .... 
54 1.73 .86 
NT .... 82 1.9-I .93 
ou ... 
37 1.57 .79 
EP .... 
20 1.30 .67 
AS .... 
41 1.61 .80 
sr .... 63 1.80 . 88 
QU ... 
15 1.18 .62 


IS 
• 
0 
•• 
35 1.54 . 78 
AT .... 
47 1.67 .83 
AU ... 
13 1.11 .59 
RS .... 
31 1.49 .75 
RT .... 42 1.62 .81 


NS .... 
24 1.38 .71 
ET .... 37 1.57 .79 
IV .... 
25 1.40 72 
ER .... 
87 1.94 .94 ss .... 
19 1.28 .67 
HT .... 28 1.45 .74 
EV .... 
20 1.30 67 


OR ... 
64 1.81 .89 
TS .... 
19 1.28 .67 
IT .... 
27 1 43 .73 
AR ... 
44 1.64 .82 
OS .... 
14 1.15 .61 
OT .... 
19 1.28 .67 
TW ... 
36 1.56 .78 
UR ... 
31 1.49 .75 
DS .... 
13 1.11 .59 
TT .... 
19 1.28 .67 
IR .... 27 1.43 .73 
DT .... 
15 1.18 .62 
IX .... 
15 1.18 .62 
PR .... 
18 1.26 .66 
YT .... 
15 1.18 .62 
HR ... 
17 1.23 .64 
CT .... 
14 1.15 .61 
TY.... 
41 1.61 .80 


TR .... 
17 1.23 .64 
3,745 


- 
--- 
- 
- -- 
--- 


GONFIO~NTIAL 


~ANII'IniFNTIAI 


APPENDIX B (</.) 


FREQUENCY DISTRIBUTIONS OF ENGLISH 
TRIGRAPHS 


Frequency distributions of English trigraphs appearing in 50,000 letters of governmental 
plaintext telegrams. 
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Table B-1 ~. The 56 trigraphs appearing 100 or more times, arranged according to their absolute 
frequencies, accompanied by the logarithms of their assigned probabilities (U) 


F 
fLlO 
Lss6 
F 
LlO Lss6 
F 
LlO 
Lss~ 


F) 
(F) 
(F) 
(F) 
(F) 
(F) 


ENT ......... 569 2.76 .99 
TOP ......... 174 2.24 .82 
EIG ......... 135 2.13 .79 


ION ......... 260 2.41 .88 
NTH ......... 171 2.23 .82 
FIV ......... 135 2.13 .79 
AND ........ 228 2.36 .86 
TWE ......... 170 2.23 .82 
MEN ........ 131 2.12 .78 
lNG ......... 226 2.35 .86 
TWO ........ 163 2.21 .81 
SEV ......... 131 2.12 .78 
IVE ......... 225 2.35 .86 
ATI ......... 160 2.20 .81 
ERS ......... 126 2.10 .78 


TIO ......... 221 2.34 .85 
THR ......... 158 2.20 .81 
UNO ........ 125 2.10 .78 


FOR ......... 218 2.34 .85 
NTY ......... 157 2.20 .81 
NET ......... 118 2.07 .77 


OUR ........ 211 2.32 .85 
HRE ......... 153 2.18 .80 
PER ......... 115 2.06 .76 
THI ......... 211 2.32 .85 
WEN ........ 153 2.18 .80 
STA ......... 115 2.06 .76 


ONE ......... 210 2.32 .85 
FOU ......... 152 2.18 .80 
TER ......... 115 2.06 .76 
NIN ......... 207 2.32 .85 
ORT ......... 146 2.16 .80 
EQU ......... 114 2.06 .76 


STO ......... 202 2.31 .84 
REE ......... 146 2.16 .80 
RED ......... 113 2.05 .76 
EEN ......... 196 2.29 .84 
SIX ......... 146 2.16 .80 
TED ......... 112 2.05 .76 
GHT ......... 196 2.29 .84 
ASH ......... 143 2.16 .80 
ERI ......... 109 2.04 .76 
INE ......... 192 2.28 .83 
DAS ......... 140 2.15 .79 
IDR ......... 106 2.03 .75 
VEN ......... 190 2.28 .83 
IGH ......... 140 2.15 .79 
IRT ......... 105 2.02 .75 
EVE ......... 177 2.25 .82 
ERE ......... 138 2.14 .79 
DER ......... 101 2.00 .74 
EST ......... 176 2.25 .82 
COM ........ 136 2.13 .79 
ORE ......... 100 2.00 .74 
TEE ......... 174 2.24 .82 
ATE ......... 135 2.13 .79 
-- 


Table B-2 ~· The 56 trigraphs appearing 100 or more times, arranged in alphabetic order by initial 
letters, then by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities (U) 


F 
LlO Lss6 
F 
!I-to Lss6 
F 
LlO 
Lss6 
(F) 
(F) 
(F) 
(F) 
F) 
(F) 


AND ........ 228 2.36 .86 
GHT ......... 196 2.29 .84 
REE ......... 146 2.16 .80 


ATI ......... 160 2.20 .81 
RED ......... 113 2.05 .76 


ASH ......... 143 2.16 .80 
HRE ......... 153 2.18,.80 


ATE ......... 135 2.13 .79 
IDR ......... 106 2.03 .75 
STO ......... 202 2.31 ,.84 
' 
SIX ......... 146 2.161.80 
I 
COM ........ 136 2.13 .79 
ION ......... 26012.41 .88 
SEV ......... 131 2.12 .78 
lNG ......... 22612.35 
1 
.86 
STA ......... 115 2.061.76 
DAS ......... 140 2.15 .79 
IVE 
. . . . . . . . 22512.35 .86 
DER ... ~ ..... 101 2.00 .74 
INE ......... 192,2.28!.83 
I 
ORE ......... 100 2.00 .74 
IGH . . . . . . . . 14012.151.79 
TIO ......... 221 2.34'.85 
IRT ......... 105!2.02 .75 
THI ......... 211 2.32 .85 
ENT ......... 569 2.76 .99 
MEN 
. . . . . . . . 13112.1 2 . 78 
TEE ......... 174 2.24 .82 
EEN ......... 196 2.29 .84 
TOP ......... 174 2.24 .82 
EVE ......... 177 2.25 .82 
NIN ......... 207,2.32 
TWE ......... 170 2.23,.82 
I 


EST ......... 176 2.25 .82 
.85 
TWO ........ 163 2.21 .81 
ERE ......... 138 2.14 .79 
NTH ......... 171,2.23 .82 
THR ......... 158 2.20 .81 
EIG ......... 135 2.13 .79 
NTY ......... 157!2.20 .81 
TER ......... 115 2.06 .76 


ERS ......... 126 2.10 .78 
NET ......... 118!2.07 .77 
TED ......... 112 2.05 .76 


EQU ......... 114 2.06 .76 
I 


ERI ......... 109 2.04 .76 
OUR ....... 21112.32 .85 
UND ........ 12512.10 .78 


ONE ........ 21012.32 .85 
YEN ......... 190\z.28 
FOR ......... 218 2.34 .85 
ORT ......... 14~~2.16 .80 
.83 


FOU ......... 152 2.18 .80 


........ 153k~ 
FIV ......... 135 2.13 .79 
PER ......... 115 2.06 .76 
WEN 
,._8Q___ 
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Table B-3 ~- The 56 trigraphs appearing 100 or more times, arranged in alphabetic order by central 
letters, then by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities (U) 


F 
LlO Lss6 
F 
LlO 
Lss6 
F 
'""10 
Lss6 
(F) 
(F) 
F) 
(F) 
F) 
(F) 


DAS ......... 140 2.15 .79. 
TIO ......... 221 2.34 .85 
HRE ......... 153,2.18 .80 


NIN ......... 207 2.32 .85 
ORT ......... 14612.16.80 
SIX ......... 146 2.16 .80 
ERE ......... 138!2.14 .79 
EIG ......... 135 2.13 .79 
ERS ......... 12612.10 J8 


EEN ......... 196 2.29 .84 
FIV ......... 135 2.13 .79 
ERI ......... 109 2.04i.76 
VEN ......... 190~2.28 .83 
HIR ......... 106 2.03 .75 
IRT ......... 105 2.02[.75 


TEE ......... 174 2.24 .82 
ORE ......... 100 2.00[.74 
WEN ........ 153 2.18 .80 


REE ......... 146 2.16 .80 
ENT ......... 569 2.76 .99 
EST ......... 176 2.25!.82 
MEN ........ 131 2.12 .78 
AND ........ 228j2.36,.86 
ASH ......... 143 2.161.80 
SEV ......... 131 2.12 .78 
lNG ......... 22612.351.86 
I 


NET ......... 118 2.07 .77 
ONE ......... 210 2.321.85 
STO ......... 202 2.311.84 
PER ......... 115 2.06 .76 
INE . . . . . . . . . 192 2.28 .83 
NTH ......... 171 2.23 .82 
TER ......... 115 2.06 .76 
UNO ........ 12512.10 .78 
ATI ......... 160 2.20 .81 
RED ......... 113 2.05 .76 
i 
NTY ......... 157 2.20 .81 
TED ......... 112 2.05 .76 
I 
ATE ......... 135 2.13 .79 
DER ......... 101 2.00,.74 
ION ......... 260 2.411.88 
STA ......... 115 2.06 .76 


FOR ......... 218 2.34 .85 


TOP ......... 174 2.24 .82 
OUR ........ 211 2.32 .85 
IGH ......... 140 2.15 .79 
FOU ......... 152 


1 


2.18 .80 
COM ........ 136 2.13 .79 
IVE ......... 225 2.35 .86 
EVE ......... 177 2.25 .82 
THI ......... 211 2.32 .85 
GHT ......... 196 2.29 .84 
TWE ......... 170 2.23 .82 
THR ......... 158 2.20 .81 
EQU ......... 114 2.06 .76 
TWO ........ 163 2.21 .81 


Table B--4 ~- The 56 trigraphs appearing 1 oo· or more times, arranged in alphabetic order by final letters. 
then by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities (U) 


F 
LlO 
Lss6 
F 
LlO 
Lss6 
F 
L10 I Lss6 
F) 
(F) 
F) 
(F) 
(F) I (F) 
' 
I 
: 
STA ......... 115 2.06 .76 
THI ......... 211 2.32!.85 
TER ......... 115!2.06,.76 


ATI ......... 160 2.201.81 
HIR ......... 106 2.03!.75 


AND ........ 228 2.36 .86 
ERI ......... 109 


1 
2.04 .76 
DER ......... 101 2.00\.74 
UNO ........ 125 2.10 .78 
I 


RED ......... 113 2.05 .76 
COM ........ 136 2.131.79 
DAS ......... 1402.151.79 


TED ......... 112 2.05 .76 
ERS ......... 126'2.10,.78 
ION ......... 260 2.41 .88 
I 
IVE ......... 225 2.35 .86 
NIN ......... 207 2.32 1.85 
ENT ......... 569 2.76 .99 


ONE ......... 210 2.32 .85 
EEN ......... 196 2.29 .84 
GHT ......... 196 2.29 .84 
INE ......... 192 2.28 .83 
YEN ......... 190 2.28 .83 
EST ......... 176 2.25 .82 


EVE ......... 177 2.251.82 
WEN ........ 153 2.18 .80 
ORT ......... 146!2.16 .80 


TEE ......... 174 2.24.82 
MEN ........ 131 2.12 .78 
NET ......... 118 2.07 .77 
TWE ......... 170 2.23 .82 


TIO ......... 221!2.34 
IRT ......... 105 2.02 .75 
HRE ......... 153 2.18 .80 
.85 
REE ......... 146 2.16 .80 
STO ......... 202 2.31 .84 
FOU ......... 152 2.18 .80 


ERE ......... 138 2.14 .79 
TWO ........ 163 2.21,.81 
EQU ......... 11412.06 .76 
ATE ......... 135 2.13 .79 


ORE ......... 100 2.00 .74 
I 
FIV ......... 13512.13 .79 


TOP ......... 174 2.24·.82 
SEV ......... 131 2.12 .78 
lNG ......... 226 2.35 .86 
EIG ......... 135 2.13 .79 
I 
FOR ......... 218 2.34 .85 
SIX ......... 146 2.16f.80 


NTH ......... 171 2.23 .82 
OUR ........ 211 2.32 .85 


2.201.81 
ASH ......... 143 2.16 .80 
THR ......... 158 2.20 .81 
IGH ......... 140 2.15 .79 
PER ......... 115 2.06 .76 
NTY ......... 157 
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APPENDIX C (ft} 


FREQUENCY DISTRIBUTION OF ENGLISH 


TETRA GRAPHS 


Frequency distributions of English tetragraphs appearing in 50,000 letters of governmental 
plaintext telegrams. 
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Table C-1 JP( The 54 tetragraphs appearing 50 or more times, arranged by absolute frequencies, 
accompanied by the logarithms of assigned probabilities (U) 


. 
I . ' 
F 
ILlO I L244 
F lw L244 
F ILlO !L244 
!(F) I 
(F) 
i(F} 
(F) 
(F) I (F) 


TION ........ 218!2.34 .99• 
THIR ........ 104 2.02 .87 
.I 
. 
ASHT ........ 64!1.811.79 


EVEN ....... 168!2.23 .95 
EENT ........ 102 2.01 .87 
HUND ....... 6411.81 !.79 


TEEN ........ 163~2.21 .94 
REQU ....... 98 1.99 .86 
DRED ....... 6311.80:.79 


ENTY ....... 16li2.21 .94 
HIRT ........ 97 1.99i .86 
RIOD ........ 63 1.80/.79 
STOP ........ 15412.19,.93 
COMM ....... 93 1.971.85 
IVED ........ 62,1.79'.78 
WENT ....... 153:2.18 .93 
QUES ........ 87 1.94:.84 
ENTS ........ 62 1.79 . 78 
NINE ........ 153 2.18 .93 
UEST . . . . . . . . 87,1.94j.84 
FFIC ........ 62 1.79!.78 


TWEN ....... 152j2.18,.93 
EQUE 
. . . . . . . 86 1.931.84 
FROM ....... 59 1.771.78 


THRE ....... 149J2.17 .93 
NDRE . . . . . . . 7711.89!.82 
IRTY ........ 59 1.77).78 
FOUR ....... 144,2.161.92 
OMMA . . . . . . . 71 1.8l81 
RTEE ........ 59,1.77j.78 


IGHT ........ 140f2.15,.92 
LLAR ....... 71 


1 


1.85 .81 
UNDR ....... 5911.77:.78 


FIVE ........ 13512.13.91 
OLLA 
. . . . . . . 70 1.85!.81 
NAUG ....... 56jl.75i.77 
HREE ....... 134'2.13 '.91 
VENT 
. . . . . . . 70 1.8l81 
OURT ....... 56il.751.77 
DASH ....... 132:2.12 .91 
DOLL . . . . . . . 68 1.83 .80 
UGHT ....... 56!1.75!.77 
EIGH ........ 13212.12 .91 
LARS ........ 68 !.8l80 
STAT ........ 54,1.73!.76 


SEVE ........ 121,2.08 .89 
THIS ........ 68 1.83 .80 
AUGH ....... 52 
11.72j.76 
ENTH ....... 114 2.06 .89 
PERI ........ 67 1.83 .80 
CENT ........ 52:1.72 .76 
MENT ....... 111 2.05 .88 
ERIO ........ 66 1.82,.80 
FICE ........ 5011.701.75 
--- ____ _l__ 


Table C-2 J,R:{ The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by initial 
letters, then by absolute frequencies, accompanied by the logarithms of assigned 
probabilities (U) 


. F 
[LlO I 
L244 
(F) 
(F) 


ASHT . . . . . . . . 6411.811.79 
AUGH ....... 5211.72,.76 


COMM . . . . . . . 93jl.97).85 
CENT . . . . . . . . 
52,·1.72~.76 


DASH ....... 132 2.12f.91 
DOLL 
. . . . . . . 68 1.831.80 


DRED . . . . . . . 6311.80,.79 


EVEN ....... 16812.23!.95 


ENTY ....... 16112.21 !.94 
EIGH ........ 132 2.12[.91 
ENTH ....... 114 2.06 .89 
EENT ........ 102 2.01 ;.87 
EQUE 
. . . . . . . 86 1.93,.84 
ERIO . . . . . . . . 
661' 1.82,.80 


ENTS . . . . . . . . 62 1.79 .78 


FOUR ....... 14412.16 


1 


.92 


FIVE ........ 135 2.13 .91 
FFIC . . . . . . . . 62 1.79 .78 


FROM . . . . . . . 59 1.771.78 


FICE . . . . . . . . 50 1.70j.75 


r 
F 
IL 10 1L244 
(F) 
I (F) 


HREE ....... 13412.13.91 


HIRT . . . . . . . . 9T 1.99 .86 


HUND ....... 64i1.81.79 


IGHT ........ 140,2.15 .92 
IVED . . . . . . . . 62) 1.79 .78 
IRTY . . . . . . . . 59! 1.77 .78 
i 


I 


LLAR ....... 7U.85:.81 


LARS . . . . . . . . 68! 1.83 1.80 
I 


MENT ....... 111!2.05 1.88 
I 
: 
I 
. 
NINE ........ 153:2.18i.93 


NDRE . . . . . . . 77i 1.891.82 
NAUG ....... 5611.75.77 
I 
I 
OMMA . . . . . . . 71! 1.85!.81 


OLLA ....... 7011.851.81 
OURT . . . . . . . 5611.751.77 


PERI ........ 67!1.83f.80 


QUES . . . . . . . . 8711.941.84 


F ~L244 
:(F) : (F) 


REQU . . . . . . . 98;1.99·.86 
RIOD . . . . . . . . 63'1.80 .79 
RTEE ........ 59:1.77.78 


STOP ........ 1542.19.93 
SEVE . . . . . . . . 12 1'2.08 .89 
STAT . . . . . . . . 54'1.73 .76 


TION ........ 2182.34.99 
TEEN ........ 163;2.21 .94 
TWEN ....... 152!2.18>.93 


THRE ....... 14912.17 .93 
THIR ........ 104 2.02 .87 
THIS . . . . . . . . 68:1.83:.80 


UEST ....... . 
UNDR ...... . 


UGHT ...... . 


87' 1.94' .84 
59 1. 77 .78 
56'1.75 .77 


VENT 
. . . . . . . 7011.85 .81 


i 
WENT ....... 153~2.18 


1 
.93 
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Table C-3 c;{ The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by their 
second letters, and then according to· their absolute frequencies, accompanied by the 
logarithms of their assigned probabilities (U) 


F 
IL 10 IL244 
(F) 
(F) 


DASH ....... 132 2.12 .91 


LARS . . . . . . . . 68 1.83 .80 
NAUG . . . . . . . 56 1.75 .77 


NDRE . . . . . . . 77 1.89 .82 


TEEN ........ 163 2.21 .94 
WENT ....... 153 2.18 .93 


SEVE ........ 121 2.08 .89 
MENT ....... 111 2.05 .88 
EENT ........ 102 2.01 .87 


REQU . . . . . . . 98 1.99 .86 


UEST . . . . . . . . 87 1.94 .84 


VHIT 
. . . . . . . 7011.85 .81 


PERI . . . . . . . . 67, 1.83 .80 
CENT . . . . . . . . 52 1.72 .76 


FFIC . . . . . . . . 62 1.79 .78 


IGHT ........ 14012.15 .92 


UGHT . . . . . . . 5611.75 .77 


THRE ....... 149,2.17,.93 


THIR ........ 104 2.02 .87 


THIS . . . . . . . . 68 1.83 .80 


F 
ILlO I L244 
F) 
(F) 


TION ........ 218 2.34[.99 
NINE ........ 153 2.18:.93 
FIVE ........ 135 2.131 


1 


.91 


HIRT ........ 97 1.99 .86 
EIGH ........ 132 


1 


2.12 .91 


RIOD . . . . . . . . 63 1.80!.79 
FICE . . . . . . . . 50(70!.75 


LLAR ....... 7111.851.81 
OLLA ....... 70,1.85 .81 


I 
OMMA ....... 71!1.851.81 


1 
I 


ENTY ....... 161!2.21!.94 


ENTH ....... 11412.06 


1 


1.89 
ENTS . . . . . . . . 6211.79 .78 
UNDR . . . . . . . 59,1.77 .78 


I 


FOUR ....... 14412.16'.92 
COMM . . . . . . . 93 
1 
1.97,.85 


DOLL 
. . . . . . . 68 1.83 .80 


EQUE 
8611.931.84 


F 
ILlO IL244 


(F) I (F) 


I 
I 
HREE ....... 134;2.13 


1 
.91 
ERIO . . . . . . . . 66 1.82 .80 


DRED . . . . . . . 63; 1.80 i. 79 


FROM . . . . . . . 59 1. 77 1. 78 
IRTY . . . . . . . . 59(77,.78 


I 
I 
ASHT . . . . . . . . 6411.81J.79 


I 
! 
I 
I 
STOP ........ 15412.191.93 
I 
I 
RTEE . . . . . . . . 59l 1.77 1.78 
STAT ........ 54 11.73:.76 
i 
! 
QUES . . . . . . . . 871 1.9(.84 
HUND . . . . . . . 64i 1.81 ~.79 
OURT . . . . . . . 5611.75 .77 


AUGH ....... 52;1.72;.76 


I 


EVEN ....... 168:2.231.95 


IVED ........ 62!1.791.78 
I 
. 
TWEN ....... 152!2.181.93 


J 
I 


Table C-4 }1). The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by their their 
letters, then by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities (U) 


F 
ILlO IL244 


(F) 
(F) 


LLAR . . . . . . . 7111.85,.81 
STAT . . . . . . . . 54l1.73 .76 


FICE ....... . 


UNDR . .. .. .. 5 1.77 .78 


EVEN ....... 16 2.23 .95 
TEEN ........ 16 2.21 .94 
TWEN ........ 15 2.18 .93 
HREE ....... 13 2.13 .91 


QUES . . . . . . . . 8 1.94 .84 
DRED . . . . . . . 63 1.80 .79 
IVED . . . . . . . . 6 1.79 .78 
RTEE . . . . . . . . 5 1.77 .78 


F 
ILlO IL244 


F) 
(F) 


EIGH ........ 13~2.12,.91 
AUGH . . . . . . . 52 1.72 .76 


IGHT ........ 140 2.151.92 
ASHT . . . . . . . . 64 1.81 .79 


UGHT 
. . . . . . . 56 1.75 .77 


THIR ........ 10~2.02 .87 


THIS . . . . . . . . 68 1.83 .80 
ERIO . . . . . . . . 66 1.82 .80 
FFIC .. .. .. . . 6 1.79 .78 


I 
OLLA 
. .. . . . . 7ol1.85,.81 


DOLL 
. . . . . . . 68!1.83 .80 


F I LlQ L244 


I (F) 
(F) 


' 
COMM . . . . . . . 93j 1.97 .85 


OMMA . . . . . . . 71,1.85 .81 


WENT ....... 15312.18,.93 


NINE ........ 15312.18;.93 


MENT ....... 111:2.05 


1.88 


EENT ........ 102;2.01 ~.87 


VENT 
. . . . . . . 7011.85j.81 


HUNT . . . . . . . 6411.81,.79 
CENT . . . . . . . . 52f1.72J.76 


TION ........ 21812.341 .. 99 


STOP ........ 1541'2.19,.93 


RIOD . . . . . . . . 63 1.80[·.79 
FROM .. . .. . . 59 1.77 .78 
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Table C-4 ~ 
The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by their third 
letters, then by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities (lJ) - Cant inued 


F 
L10 I L244 
F 
l-10 L244 
F 
Lto 
L244 
(F) 
(F) 
F) 
(F) 
F) 
(F) 


REQU ....... 98 1.99 .86 
DASH ....... 132 2.12 .91 
FOUR ....... 14412.16 .92 


UEST ........ 87 1.94 .84 
EQUE 
. . . . . . . 86 1.93 .84 
THRE ....... 149 2.17 .93 
NAUG . . . . . . . 56 1.75 i·77 


HIRT ........ 97 
1.9r6 
NDRE ....... 77 1.89 .82 
ENTY ....... 161 2.21 .94 


LARS ........ 68 1.83 .80 
ENTH ....... 114 2.06 .89 


PERI ........ 67 1.83 .80 
ENTS ........ 62 1.79 .78 
FIVE ........ 135 2.13 .91 


OURT ....... 56 1.75 .77 
IRTY ........ 59 1.77 .78 
SEVE ........ 121 2.08 .89 
-- 
-------~ L_ 
----------~· 
- 
---~~- 
--- 


Table C-51t_e}. The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by their final 
letters, then by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities (U) 


F 
Lw L244 
F 
fL-10 
L244 
F 
Lto,L244 
(F) 
(F) 
F) 
(F) 
(F) 
1 (F) 


OMMA . . . . . . . 71 1.85 .81 
DASH ....... 132 2.12 .91 
QUES ........ 87 1.941.84 
OLLA 
. . . . . . . 70!1.85,.81 
EIGH ........ 13212.12 .91 
THIS ........ 68 1.83,.80 


ENTH ....... 114 2.06 .89 
LARS ........ 68 1.83,.80 
AUGH ....... 52 1.72 .76 
ENTS ........ 62 1.79 .78 


FFIC ........ 62 1.79j.78 


I 
PERI ........ 67 1.83 .80 


.HUND . . . . . . . 64 1.81,.79 
WENT ....... 153 2.18,.93 
DOLL ....... 68 1.83 .80 
IGHT ........ 14012.15 .92 
DRED . . . . . . . 63ji.80,.79 
MENT ....... II I. 2.05 .88 


RIOD . . . . . . . . 63 
11.80,.79 
COMM ....... 93 1.97 .85 
EENT ........ l02j2.011.87 


IVED . . . . . . . . 62(79 .78 
FROM ....... 59 1.77 .78 
HIRT . . . . . . . . 97, 1.99 i.86 


UEST . . . . . . . . 871 1.94j.84 


TION ........ 218,2.34 .99 
VENT 
. . . . . . . 70/1.85 .81 
NINE ........ 153,2.181.93 
EVEN 
. . . . . . . 168 2.23 .95 
ASHT . . . . . . . . 64: 1.81 . 79 
THRE ....... 149 2.17'.93 
TEEN ........ 163 2.21 .94 
OURT ....... 56,1.751.77 


FIVE ........ 135 2.13 .91 
TWEN ....... 152,2.18 .93 
UGHT . . . . . . . 56 1.75 .. 77 
HREE ....... 13412.13 .91 
STAT . . . . . . . . 5411.731.76 
SEVE . . . . . . . . 121 2.08 .89 
ERIO . . . . . . . . 66 1.82 .80 
CENT ........ 5211.72.76 


EQUE ....... 86 1.93!.84 
NDRE ....... 77 1.89,.82 
STOP ........ 154 2.19 .93 
i 
: 


RTEE ........ 59 1.77.78 
REQU . . . . . . . 98\ 1.991.86 


FICE ........ 50 1.70 .75 
FOUR ....... 144 2.16 .92 
I 
THIR ........ 104 2.02 .87 
I 


LLAR 
. . . . . . . 71 1.85 .81 
ENTY ....... 16112.21 .94 


NAUG . . . . . . . 56 1.751.77 
UNDR ....... 59 1.77 .78 
IRTY . . . . . . . . 59,1.77 .78 
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V} 
tn 
...J 
~~ 
0~ 
xt- 
-<C 
oa.. 
zo 
UJZ 
g:<( 
<Co 
~ 
0 
~ 


AM 
AN 


AS 


AT 
BE 
BN 


ACT 


ADD 
ADJ 
AGE 


AGO 


AID 
AIM 
AIR 
ALL 
AND 


ANY 


APT 


ARC 


ARE 


·ARM 
ASK 


BAD 
BAG 
BAR 
BID 


ABLE 
AIDE 


ALLY 
ALSO 


AREA 


ARMY 
ASIA 
AWAY 
AXIS 
BACK 
BASE 


BEEN 


BLUE 
BODY 
BOMB 
BOOK 


D-2 
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Table D-1 cj>. List of words used in military text arranged alphabetically 
according to word length (U) 


TWO LEITER WORDS 


BY 
EM 
IN 
MM 
OK 
co 
GO 
IS 
MP 
ON 
CP 
HE 
IT 
MY 
OR 
CQ 
HQ 
MC 
NO 
QM 


DO 
IF 
ME 
OF 
so 


THREE LEITER WORDS 


BIG 
EAT 
HER 
MIX 
PVT 


BOX 
END 
HIM 
NAN 
QMC 
BUT 
EYE 
HIS 
NET 
RED 


BUY 
FAR 
HOW 
NEW 
RID 


CAM 
FEW 
ILL 
NOT 
ROB 
CAN 
FIT 
ITS 
NOW 
RUN 
CAR 
FIX 
JIG 
OFF 
SAW 
CAY 
FOR 
JOB 
OLD 
SAY 
COL 
FOX 
KEG 
ONE 
SEA 
CPL 
GAL 
LAW 
OUR 
SEE 
CUT 
GAS 
LAY 
OUT 
SET 
CWT 
GEN 
LET 
OWE 
SGT 
DAY 
GET 
LOT 
OWN 
SHE 


DID 
GHQ 
LOW 
PAR 
SIX 


DIE 
GOT 
. MAJ 
PAY 
. SPY 
DOG 
GUN 
MAN 
PEN 
SUM 
DRY 
HAD 
MAT 
PER 
SUN 
DUE 
HAM 
MAY 
PIN 
TAN 


DUN 
HAS 
MEN 
PUT 
TAX 


FOUR LEITER WORDS 


BOTH 
EACH 
FLEE 
HIGH 
LATE 


BULB 
EAST 
FORM 
HILL 
LEAD 


BULK 
EASY 
FOUR 
HITS 
LEAK 


CALL 
EDGE 
FROM 
HOLD 
LEFT 


CELL 
EYES 
FULL 
HOOK 
LESS 
CITY 
FALL 
FUSE 
INTO 
LIEU 
CODE 
FARM 
FUZE 
ITEM 
LINE 
COOK 
FAST 
GUNS 
JOIN 
LIST 


DARK 
FEEL 
HALF 
JULY 
LOAD 
DASH 
FEET 
HALT 
JUNE 
LONG 


DATE 
FELL 
HAND 
JUST 
LOOK 
DAYS 
FILE 
HARD 
KEEP 
LOSS 


DIRT 
FIRE 
HAVE 
KIND 
LOST 


DOWN 
FIRM 
HEAD 
KING 
LOVE 


DRAW 
FIVE 
HERD 
LAND 
MADE 
DUMP 
FLAG 
HERE 
LAST 
MAIM 
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TO 
us 
WD 
WE 
wo 


TEN 
THE 
TIN 


TON 
TOO 
TOP 
TRY 
TUB 
1WO 
USE 
VAT 


WAR 


WAS 
WAY 


WET 
WGT 


WON 


YET 


YOU 


MAIN 
MANY 


MASK 
MASS 


MEAT 
MEET 


MESS 


MIKE 
MILE 
MINE 


MORE 
MOVE 
MTCL 
MULE 


NAVY 
NEAR 
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Table D-1 ~ 
List of words used in military text arranged 
according to word length (D)--Continued 
alphabetically 


ABOUT 


AFTER 
AGAIN 
AGENT 
ALARM 
ALERT 
ALIGN 
ALINE 


ALLOW 
ALONG 
AMONG 


ANNEX 


APPLY 


APRIL 


AREAS 
ARMOR 
ASSET 


AWAIT 
AWARD 
BAKER 


BANKS 


BARGE 


BEACH 


BEGIN 
BEING 


BLACK 


BLIND 


NEXT 
NINE 


NOON 
NOTE 
OBOE 
OMIT. 
ONCE 
ONLY 
OPEN 
ORAL 
OVER 


BOATS 
BOMBS 
BOOTH 


BREAK 
BRIBE 


BROKE 
BURST 
CANAL 
CASES 
CAUSE 
CEASE 
CHECK 
CHIEF 
CLEAR 
CLERK 
CLOSE 
COAST 
COLON 
COMMA 
CORPS 
COUNT 
COVER 
CREEK 
CREST 
CROSS 
CURVE 
DAILY 


PARK 
PASS 
PIPE 
PLAN 
POST 
PUMP 
PUSH 


RAID 
RAIL 
RAIN 
RANK 


DECKS 


DEFER 


DELAY 
DEPOT 


DEPTH 


DOCKS 


DRAWN 


DRESS 


DRILL 
DRIVE 
EAGER 


EARLY 


EIGHT 


ENEMY 


ENTER 


EQUAL 
EQUIP 


ERASE 


ERROR 


EITHER 


EVERY 


FATAL 
FEARS 


FERRY 


FIELD 
FIFTH 


FIFTY 


FOUR LETTER WORDS- Continued 


REAR 


RIOT 
ROAD 
ROUT 
RULE 
RUSH 
SAID 
SAME 
SANK 
SEEN 
SHIP 


SHOT 
SIDE 
SOME 
SOON 
STOP 
SUNK 


TAKE 
TALK 
TANK 
TARE 


TASK 


TEAM 
TENT 
TEXT 
THAN 
THAT 
THEM 
THEN 


THEY 
THIS 


TIME 


TONS 


FIVE LETTER WORDS 


FLIGHT 
LATER 
PRIOR 
FIRES 
LEAST 
PROOF 
FIRST 
LEAVE 
PROVE 


FLANK 
LEVEL 
QUEEN 
FLARE 
LIGHT 
QUICK 
FLATS 
UMIT 
QUIET 


FLEET 
LOCAL 
RADIO 
FOGGY 
MAJOR 
RAFTS 
FORCE 
MARCH 
RAIDS 
FORTY 
METER 
RALLY 
FRESH 
MILES 
RANGE 


FRONT 
MOTOR 
RAPID 


GATES 
NAVAL 
REACH 
GAUGE 
NIGHT 
READY 


GIVEN 
NINTH 
REFER 


GOING 
NORTH 
REPEL 
GROUP 
ORDER 
RIDGE 


GUARD 
OTHER 
RIGHT 


GUEST 
PACKS 
RIGID 
HEAVY 
PAIRS 
RIVER 


HONOR 
PARTY 
ROGER 
HORSE 
PETER 
ROUTE 
HOURS 
PLACE 
SCALE 
HOUSE 
PLAIN 
SEIZE 
ISSUE 
PLANS 
SEVEN 
JAPAN 
POINT 
SHELL 


LARGE 
PRESS 
SHIFT 
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TOOK 
TOOL 
TOWN 
TYPE 


UNIT 


VARY 
VERY 


WEAK 
WEEK 
WELL 
WERE 


SHIPS 
SHORE 
SIEGE 
SIGHT 
SIXTH 
SIXTY 
SLOPE 
SMALL 
SMOKE 
SOUTH 
SPEED 
SPELL 
SPLIT 
SQUAD 
STAFF 
STAKE 
START 
STEEL 
SUGAR 


TAKEN 


TANKS 


TENTH 
THEIR 
THERE 


THESE 


THIRD 
THREE 


WEST 


WHAT 
WHEN 
WILL 
WIRE 
WITH 


XRAY 
YOKE 
YOUR 
ZERO 
ZONE 


TITLE 


TODAY 
TOTAL 
TRACT 


TRAIN 


TROOP 
TRUCE 
TRUCK 


UNDER 


UNION 
UNITS 
USUAL 


VALOR 


VISIT 


VITAL 


VOCAL 
VOICE 
WAGON 


WEIGH 
WHEEL 
WHERE 


WHICH 


WIDTH 


WIPED 
WOODS 
YARDS 
ZEBRA 
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0-.4 
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Table D-1 Gef. List of words used in military text arranged alphabetically 
according to word length (D)--Continued 


SIX LETTER WORDS 


ACCEPT 
BOMBED 
DEGREE 
FIERCE 
LESSON 
OTHERS 
RESUME 
SUFFER 
ACCESS 
BOMBER 
DEPART 
FILING 
LETTER 
OUTPUT 
RETIRE 
SUMMER 
ACROSS 
BOTTOM 
DEPEND 
FINISH 
LINING 
PANAMA 
RETURN 
SUMMIT 
ACTION 
BRANCH 
DEPLOY 
FIRING 
LIQUID 
PARADE 
REVIEW 
SUMMON 
ACTIVE 
BREACH 
DESERT 
FLIGHT 
LITTER 
PARLEY 
RIDING 
SUNDAY 
ADJUST 
BREEZE 
DETACH 
FLYING 
LITTLE 
PASSED 
ROCKET 
SUNKEN 
ADVICE 
BRIDGE 
DETAIL 
FOLLOW 
LOCATE 
PASSES 
ROUTED 
SUNSET 
ADVISE 
BROKEN 
DEVICE 
FORCES 
LOSSES 
PATROL 
ROUTES 
SUPPLY 


AFFAIR 
BUREAU 
DEVISE 
FORMAL 
MANAGE 
PERIOD 
RUBBER 
SURVEY 
ALASKA 
CANADA 
DIRECT 
FORMED 
MANNER 
PICKET 
RUNNER. 
SWITCH 


ALLEGE 
CANCEL 
DIVERT 
FOUGHT 
MANUAL 
PINCER 
SALARY 
SYSTEM 
ALLIED 
CANNOT 
DIVIDE 
FOURTH 
MEAGER 
PISTOL 
SCHEME 
TABLES 
ALLIES 
CANVAS 
DOCTOR 
FRIDAY 
MEDIUM 
PLACES 
SCHOOL 
TANKER 


ALWAYS 
CASUAL 
DOLLAR 
FUTURE 
MEMBER 
PLANES 
SCORED 
TARGET 
ANIMAL 
CAUSED 
DOWNED 
GARAGE 
METHOD 
POINTS 
SCREEN 
TATTOO 


ANNUAL 
CENTER 
DRYRUN 
GEORGE 
METRIC 
POISON 
SEAMAN 
TERROR 
ANYWAY 
CHANGE 
DUGOUT 
GREASE 
MINING 
POLICE 
SEAMEN 
THIRTY 


APPEAR 
CHARGE 
DURING 
GROUND 
MINUTE 
PONTON 
SEARCH 
THOUGH 


ARABIA 
CHEESE 
EFFECT 
GUNNER 
MIRROR 
POSTAL 
SECOND 
THREAT 


ARMIES 
CHURCH 
EFFORT 
HALTED 
MOBILE 
PREFER 
SECTOR 
TRAINS 


ARMORY 
CIPHER 
EIGHTH 
HAMMER 
MONDAY 
PROMPT 
SECURE 
TRENCH 
ARREST 
CIRCLE 
EIGHTY 
HAPPEN 
MORALE 
PROPER 
SELECT 
TROOPS 


ARRIVE 
COFFEE 
EITHER 
HARBOR 
MORTAR 
PURSUE 
SERIAL 
TURRET 


ASSETS 
COLORS 
ELEVEN 
HELPER 
MOVING 
RADIAL 
SETTLE 
TWELVE 


ASSIST 
COLUMN 
EMBARK 
HIGHER 
MURDER 
RAIDED 
SEVERE 
TWENTY 


ASSURE 
COMBAT 
EMPLOY 
HOURLY 
MUZZLE 
RATION 
SHELLS 
UNABLE 


ATTACH 
COMMIT 
ENCODE 
INDEED 
NAUGHT 
RAVINE 
SIGCOM 
lJNITED 


ATTACK 
COMMON 
ENGAGE 
INFORM 
NEARER 
RECORD 
SIGNAL 
lTNLESS 


ATTAIN 
CONVEY 
ENGINE 
INLAND 
NINETY 
REDUCE 
SINGLE 
VALLEY 


AUGUST 
CONVOY 
ENROLL 
INTEND 
NORMAL 
REFILL 
SLIGHT 
VERBAL 
BANNER 
COURSE 
ENTIRE 
INTENT 
NOTING 
REFUGE 
SPHERE 
VERIFY 
BARBED 
CREDIT 
ERASER 
INVENT 
;'\/OUGHT 
REFUSE 
SPOOLS 
VESSEL 
BARGES 
CRISIS 
ESCORT 
ISLAND 
NOVICE 
REJECT 
SPOONS 
VICTIM 


BATTEN 
CRITIC 
EUROPE 
ISSUES 
NOZZLE 
RELIEF 
STATES 
VICTOR 


BATTLE 
DAMAGE 
EXCEPT 
KEEPER 
\iUMBER 
REMAIN 
STATUS 
VISITS 


BEETLE 
DEBARK 
EXCESS 
KILLED 
OCCUPY 
REMEDY 
STRAFE 
VISUAL 


BEFORE 
DECIDE 
EXCITE 
LADDER 
OFFEND 
REPAIR 
STREET 
WEIGHT 
BETTER 
DECODE 
EXPECT 
LANDED 
OFFICE 
REPORT 
STRESS 
WIRING 


BEYOND 
DECREE 
EXPELS 
LAUNCH 
OPPOSE 
RESCUE 
STRIPS 
WITHIN 
BILLET 
DEFEAT 
EXPEND 
LEADER 
ORDERS 
RESIST 
SUBMIT 
WOODED 


BITTER 
DEFECT 
EXTEND 
LEAGUE 
ORIENT 
RESULT 
SUDDEN 
ZIGZAG 
BODIES 
DEFEND 
EXTENT 


SEVEN LETTER WORDS 


ABANDON 


ABSENCE 
ADDRESS 
ADVANCE 
AGAINST 


ALMANAC 


AMMETER 
ANALYZE 
ANOTHER 
ANTENNA 


APPOINT 
APPROVE 


ARMORED 
ARRANGE 
ARRIVAL 


ASIATIC 
ASSALLT 
ATTACKS 


ATTEMPT 
AVERAGE 


AVIATOR 
AWKWARD 
BAGGAGE 


BALLOON 


BARRAGE 


BATTERY 


BATTLES 


BEARING 


BECAUSE 


BEDDING 


BETWEEN 


BICYCLE 


BINDING 


BIVOUAC 
BOMBARD 
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Table D-1 (£1. List of wor?s used in military text arranged alphabetically 


accord~ng to word length (D)--Continued 


SEVEN LEITER WORDS-Continued 


BOMBERS 
DEBOUCH 
FISHING 
LANDING 
PACKAGE 
REQUEST 
SUPPOSE 


BOMBING 
DECIDED 
FiTTING 
LEADING 
PASSAGE 
REQUIRE 
SURPLUS 
BOYCOTT 
DECLARE 
FOGHORN 
LECTURE 
PASSIVE 
RESERVE 
SUSPEND 


BRIBERY 
DECODED 
FORCING 
LIAISON 
PATROLS 
RESPECT 
TACTICS 


BRIGADE 
DEFENSE 
FORGING 
LIBRARY 
PAYROLL 
RESPOND 
TALKING 


CALIBER 
DELAYED 
FORWARD 
LICENSE 
PLACING 
RETIRED 
TARGETS 
CALIBRE 
DELIVER 
FOXHOLE 
LIFTING 
PLATOON 
RETREAT 
TERRAIN 


CAPTAIN 
DERRICK 
FUEL OIL 
LOADING 
POUNDER 
REVENUE 
THATTHE 


CAPTIVE 
DESTROY 
FURNISH 
LOGICAL 
PRAIRIE 
REVERSE 
THROUGH 
CARRIER 
DETRAIN 
FURTHER 
LOOKOUT 
PRECEDE 
REVOLVE 
TOBACCO 
CAVALRY 
DE TRUCK 
GASSING 
MACHINE 
PREPARE 
ROUTINE 
TONIGHT 


CENTRAL 
DEVELOP 
GENERAL 
MANDATE 
PRESENT 
RUNNING 
TONNAGE 


CHANGES 
DIAGRAM 
GETTING 
MANNING 
PRESSED 
SAILORS 
TORPEDO 
CHANNEL 
DISCUSS 
GLASSES 
MAPPING 
PRIMARY 
SATISFY 
TRACTOR 
CHARLIE 
DISEASE 
GRADUAL 
MARCHED 
PROCEED 
SECRECY 
TRAFFIC 
CHASSIS 
DISMISS 
GRENADE 
MARSHAL 
PROGRAM 
SECTION 
TRAWLER 


CIRCUIT 
DISTILL 
GUARDED 
MARTIAL 
PROMOTE 
SECTORS 
TRIGGER 


CLIPPER 
DROPPED 
HALTING 
MAXIMUM 
PROPOSE 
SERVICE 
TUESDAY 
COASTAL 
EASTERN 
HASBEEN 
MEDICAL 
PROTECT 
SESSION 
TWELFTH 


COLLECT 
ECHELON 
HEADING 
MESSAGE 
PROTEST 
SETBACK 
UNKNOWN 


COLLEGE 
ELEMENT 
HEAVIER 
MESSING 
PROVOST 
SEVENTH 
UNUSUAL 
COLONEL 
ELEVATE 
HIGHEST 
MILITIA 
PURPOSE 
SEVENTY 
USELESS 
COMMAND 
EMBASSY 
HOLDING 
MINIMUM 
PURSUIT 
SEVERAL 
UTILITY 


COMMEND 
ENCODED 
HORIZON 
MISFIRE 
PUSHING 
SHELLED 
VACANCY 
COMMENT 
ENEMIES 
HOSTILE 
MISSING 
QUARTER 
SHORTLY 
VARYING 


COMMUTE 
ENFORCE 
HUNDRED 
MISSION 
QUICKLY 
SIGNIFY 
VESSELS 
COMPANY 
ENGAGED 
ICEBERG· 
MORNING - RADIATE 
SIMILAR 
VICTORY 
COMPASS 
ENTENTE 
ILLEGAL 
NATURAL 
RAIDING 
SIMPLEX 
VILLAGE 


CONCEAL 
ENTRAIN 
ILLNESS 
NEAREST 
RAILWAY 
SINKING 
VISIBLE 
CONDEMN 
ENTRUCK 
INCLUDE 
NIGHTLY 
RAINING 
SIXTEEN 
VISITOR 
CONDUCT 
ENVELOP 
INFUCT 
NOTHING 
RAPIDLY 
SLOPING 
WARFARE 


CONFINE 
EVENING 
INITIAL 
NUMBERS 
REACHED 
SMOKING 
WARSHIP 
CONTACT 
EXCLUDE 
INQUIRE 
OBSERVE 
RECEIPT 
SOLDIER 
WEATHER 


CONTAIN 
EXPLAIN 
INQUIRY 
OCTOBER 
RECEIVE 
STARTER 
WESTERN 
CONTROL 
EXPRESS 
INSPIRE 
OFFENSE 
RECOVER 
STATION 
WHETHER 


CORRECT 
EXTRACT 
INSTALL 
OFFICER 
RECRUIT 
STEAMER 
WILLIAM 


COUNCIL 
EXTREME 
INSTANT 
OMITTED 
REDUCED 
STOPPED 
WINDAGE 


COURIER 
FALLING 
INVADED 
OPERATE 
REFUGEE 
STORAGE 
WITHOUT 
COVERED 
FARTHER 
ISLANDS 
OPINION 
REGULAR 
SUCCESS 
WITHTHE 


CROSSED 
FEDERAL 
ISSUING 
ORDERED 
RELEASE 
SUGGEST 
WITNESS 
CRUISER 
FIFTEEN 
JANUARY 
OUTPOST 
RELIEVE 
SUMMARY 
WOUNDED 


CURRENT 
FIGHTER 
JUMPOFF 
OUTSIDE 
REPAIRS 
SUNRISE 
WRECKED 
CYCLONE 
FILLING 
KITCHEN 
PACIFIC 
REPLACE 
SUPPORT 
WRITTEN 
DAMAGED 
FINDING 
KILLING 


EIGHT LEITER WORDS 


ACTIVITY 
ADVANCED AIRBORNE 
AIRPLANE 
ANNOUNCE APPROACH 
ASSEMBLE 
ACTUALLY ADVANCES AIRCRAFT 
ALTITUDE 
ANTITANK 
APPROVAL 
ASSEMBLY 
ADJACENT 
ADVISING 
AIRDROME AMERICAN 
APPARENT 
ARMAMENT ASSIGNED 


ADJUTANT ADVISORY 
AIRFIELD 
ANALYSIS 
APPEARED 
ARRESTED 
ASSOONAS 
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Table D-1 ~ 
List of words used in military text arranged 
according to word length (D)--Continued 


alphabetically 


EIGHT LETTER WORDS-.continued 


ATLANTIC 
CRITIQUE 
DRIFTING 
FORENOON MEDICINE 
PRIORITY 
SERGEANT 
ATTACKED CROSSING 
EASTERLY 
FORTRESS 
MEMORIAL PRISONER 
SHELLING 
ATTEMPTS 
CRUISERS 
EASTWARD FOURTEEN MERCIFUL 
PROBABLE 
SHIPPING 
AVIATION 
DAMAGING ECONOMIC 
FRONTAGE MESSAGES 
PROBABLY SIGHTING 
BARRACKS DARKNESS 
EFFECTED 
FUSELAGE 
MIDNIGHT 
PROGRESS 
SKIRMISH 
BARRAGES DAYLIGHT 
EFFICACY 
GARRISON 
MILITARY 
PROHIBIT 
SOLDIERS 


BATTERED DECEMBER EIGHTEEN 
GROUNDED MISFIRES 
PROTESTS 
SOUTHERN 


BATTLING 
DECIPHER 
ELEMENTS 
GROUPING 
MISSIONS 
PROTOCOL SPECIFIC 


BESIEGED 
DECISION 
ELEVENTH GUARDING MOBILIZE 
PURPOSES 
SPOTTING 


BILLETED 
DECISIVE 
ELIGIBLE 
HA VEBEEN MONOPOLY QUARTERS SQUADRON 
BOUNDARY DECLARED EMPLOYEE 
HINDERED 
MOUNTAIN RAILHEAD 
STANDARD 


BREAKING 
DECREASE 
EMPLOYER HOSPITAL 
MOVEMENT RAILROAD STATIONS 


BUILDING 
DEDICATE 
ENCIPHER 
HOWITZER 
NATIONAL 
RALLYING 
STRATEGY 


BULLETIN 
DEFEATED ENCIRCLE 
IDENTIFY 
NAUTICAL 
RECEIVER 
SUFFERED 
BUSINESS 
DEFENDED ENFILADE 
IGNITION 
NINETEEN 
RECORDER SUITABLE 
CALAMITY 
DEFENDER ENGAGING 
IMPROPER 
NORTHERN REDCROSS 
SUPERIOR 
CAMPAIGN 
DEFENSES 
ENGINEER 
IMPROVED 
NOVEMBER REENLIST 
SUPPLIES 
CANISTER 
DEFERRED ENLISTED 
INCIDENT 
OBSERVED 
REGIMENT 
SURPRISE 
CAPACITY 
DEFINITE 
ENORMOUS INDICATE 
OBSERVER REGISTER 
SURROUND 
CAPTURED DELAYING 
ENROLLED INDIRECT 
OBSOLETE 
REJECTED 
SURVIVED 
CARELESS 
DEMANDED ENTERING 
INFANTRY 
OBSTACLE 
REJECTOR 
SUSPENSE 
CARRIAGE 
DEPARTED 
ENTRENCH INFECTED 
OCCUPIED 
REMEDIES 
SWEEPING 
CARRIERS 
DEPLOYED ENVELOPE 
INITIATE 
OFFENDED REMEMBER SWIMMING 
CARRYING DEPORTED EQUALIZE 
INSECURE 
OFFICERS 
REPAIRED 
TACTICAL 
CASUALTY DESCRIBE 
EQUIPAGE 
INSIGNIA 
OFFICIAL 
REPEATER TAXATION 
CAUSEWAY DESERTED 
ESCORTED 
INSTRUCT 
OPERATOR REPELLED 
TELEGRAM 


CEMETERY DESERTER ·ESTIMATE 
INTEREST 
OPPOSING 
REPLACED 
TERRIBLE 


CENTERED DESPATCH 
EUROPEAN INTERIOR 
·oPPOSITE 
REPORTED TERRIFIC 
CHAPLAIN 
DETACHED EVACUATE INTERNAL 
ORDINATE 
REPULSED 
THATHAVE 


CHEMICAL 
DETECTOR EXCAVATE INTRENCH 
ORDNANCE REQUIRED 
THIRTEEN 


CIRCULAR 
DETONATE. EXCHANGE INVADING 
OUTBOARD RESEARCH 
THOUSAND 
CITATION 
DEVELOPE 
EXERCISE 
INVASION 
OUTGUARD RESERVES 
THURSDAY 
CIVILIAN 
DICTATED 
EXPANDED INVENTED 
OUTPOSTS 
RESPECTS 
TOMORROW 
CLERICAL 
DICTATOR 
EXPEDITE 
JETPLANE 
PAINTING 
RESTORED 
TOTALING 
CODEBOOK DIMINISH 
EXPELLED 
JUNCTION 
PARALLAX RETIRING 
TRAILERS 
COMMANDS DIRECTOR 
EXPENDED 
LANGUAGE PARALLEL 
RETURNED TRAINING 


COMMENCE DISARMED 
EXPENSES 
LATITUDE 
PASSPORT 
REVIEWED 
TRANSFER 
COMMERCE DISASTER 
EXTENDED LETTERED 
PLANNING 
REVOLVER TRAVERSE 
COMPLETE 
DISLODGE 
EXTERIOR 
LIMITING 
POLITICS 
RIGOROUS 
TRAWLERS 
COMPOSED 
DISPATCH 
FACTIONS 
LOCATION 
PONTOONS SABOTAGE 
VEHICLES 
CONCLUDE DISPERSE 
FATALITY 
LUMINOUS 
POSITION 
SANITARY 
VICINITY 
CONCRETE DISTANCE 
FEBRUARY MAINTAIN 
POSITIVE 
SATURDAY VIGOROUS 
CONFLICT 
DISTRESS 
FERRYING 
MANDATED POSSIBLE 
SCHEDULE 
WARSHIPS 
CONGRESS 
DISTRICT 
FIGHTERS 
MANEUVER POSTPONE 
SEABORNE WESTERLY 
CONTINUE 
DIVIDING 
FIGHTING 
MARCHING PREPARED 
SEALEVEL 
WESTWARD 
CONTRACT DIVISION 
FINISHED 
MARITIME 
PRESERVE 
SELECTED 
WINDWARD 


CORPORAL DOCTRINE 
FLANKING 
MATERIAL 
PRESSING 
SENTENCE 
WIRELESS 
CORRIDOR DOMINANT FLEXIBLE 
MATERIEL 
PRESSURE 
SENTINEL 
WITHDRAW 


COVERING 
DRESSING 
FOOTHOLD MECHANIC 
PRINTING 
SEPARATE 
WITHDREW 


CRITICAL 
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Table D-1 ~. List of wor?s used in military text arranged alphabetically 


accord~ng to word length (D)--Continued 
NINE LETTER WORDS 


ACCESSORY 
CENTERING 
DEVELOPED 
FORMATION 
MOVEMENTS 
PROTECTOR 
ACCOMPANY 
CHALLENGE 
DIETITIAN 
FORTIFIED 
MUNITIONS 
PROTESTED 
ACCORDING 
CHARACTER 
DIFFERENT 
FRONTLINE 
NAVALBASE 
PROVISION 
ADDRESSED 
CHAUFFEUR 
DIFFICULT 
GROUPMENT 
NECESSARY 
PROXIMITY 
ADDRESSES 
CHRONICAL 
DIMENSION 
GYRO METER 
NECESSITY 
RADIATION 
ADMISSION 
CIGARETTE 
DIRECTION 
HOSTILITY 
NEGLIGENT 
RADIOGRAM 
ADVANCING 
CIRCULATE 
DIRIGIBLE 
HURRICANE 
NEWSPAPER 
READINESS 
ADVANTAGE 
CIVILIANS 
DISAPPEAR 
IDENTICAL 
NORTHEAST 
REARGUARD 
AERODROME 
CLEARANCE 
DISCUSSED 
IMMEDIATE 
NORTHERLY 
REBELLION 
AEROPLANE 
COALITION 
DISINFECT 
IMPORTANT 
NORTHWARD 
RECEIVING 
AFTERNOON 
COLLAPSED 
DISMISSAL 
IMPRESSED 
NORTHWEST 
RECOGNIZE 


AGREEMENT 
COLLISION 
DISPERSED 
INCENTIVE 
NUMBERING 
RECOMMEND 
AIRDROMES 
COMBATANT 
DISTRICTS 
INCIDENCE 
OBJECTION 
REENFORCE 


AIRPLANES 
COMMANDED 
DIVISIONS 
INCIDENTS 
OBJECTIVE 
REFERENCE 
ALLOTMENT 
COMMANDER 
DOMINANCE 
INCLINING 
OBTAINING 
REFILLING 


ALLOWANCE 
COMMITTEE 
DOMINATED 
INCLUDING 
OCCUPYING 
REGARDING 
ALTERNATE 
COMPANIES 
ECHELONED 
INCLUSIVE 
OFFENSIVE 
REINFORCE 
AMBULANCE 
COMPELLED 
EFFECTIVE 
INCREASED 
OFFICIALS 
REINSTATE 
AMUSEMENT 
COMPLETED 
EFFICIENT 
INDEMNITY 
OPERATING 
REMAINDER 


ANNOUNCED 
CONDEMNED 
ELABORATE 
INDICATED 
OPERATION 
REMAINING 


ANONYMOUS 
CONDENSED 
ELEVATION 
INFLATION 
OSCILLATE 
REPRESENT 
APPARATUS 
CONDITION 
ELSEWHERE 
INFLICTED 
OUTSKIRTS 
REPRISALS 


APPOINTED 
CONFERRED 
EMBASSIES 
INFLUENCE 
PARACHUTE 
REQUESTED 


ARBITRARY 
CONFIDENT 
EMERGENCY 
INHABITED 
PARAGRAPH 
REQUIRING 
ARTILLERY 
CONFLICTS 
EMPLOYING 
INSTANTLY 
PARTITION 
RESOURCES 
ASCENSION 
CONQUERED 
ENDURANCE 
INTEGRITY 
PASSENGER 
RESTRAINT 


ASSAULTED 
CONTINUAL 
ENGINEERS 
INTENSIVE 
PATRIOTIC 
RETENTION 
ASSISTANT 
CONTINUED 
ENLISTING 
INTENTION 
PENETRATE 
RETURNING 


ASSOCIATE 
CONTINUES 
ENTRAINED 
INTERCEPT 
PERMANENT 
REVIEWING 


ASSURANCE 
COOPERATE 
EQUIPMENT 
INTERDICT 
PERSONNEL 
SCREENING 
ATTACKING 
CORRECTED 
ESTABLISH 
INTERFERE 
PLACEMENT 
SEAPLANES 


ATTEMPTED 
CRITICISE 
ESTIMATED 
INTERMENT 
POLITICAL 
SECRETARY 
ATTENTION 
CRITICISM 
ESTIMATES 
INTERPOSE 
POPULATED 
SEMICOLON 
AUTOMATIC 
DEBARKING 
EXCESSIVE 
INTERRUPT 
POSITIONS 
SEMIRIGID 


AVAILABLE 
DECREASED 
EXCLUSION 
INTERVENE 
PRACTICAL 
SEPTEMBER 
BALLISTIC 
DEFECTIVE 
EXCLUSIVE 
INTERVIEW 
PRECEDING 
SERIOUSLY 
BAROMETER 
DEFENSIVE 
EXECUTIVE 
INVENTION 
PREFERRED 
SERVICING 
BATTALION 
DEFICIENT 
EXERCISES 
IRREGULAR 
PREMATURE 
SEVENTEEN 
BATTERIES 
DEPARTURE 
EXHIBITED 
KILOMETER 
PREPARING 
SHELLFIRE 
BEACHHEAD 
DEPENDENT 
EXPANSION 
LAUNCHING 
PRESIDENT 
SITUATION 


BEGINNING 
DESCRIBED 
EXPANSIVE 
LIABILITY 
PRINCIPAL 
SIXTEENTH 
BLOCKADED 
DESIGNATE 
EXPENSIVE 
LOGISTICS 
PRINCIPLE 
SOUTHEAST 
BOMBARDED 
DESTITUTE 
EXPLOSION 
LONGITUDE 
PRISONERS 
SOUTHWARD 


BRIGADIER 
DESTROYED 
EXPLOSIVE 
MAINTAINS 
PROCEDURE 
SOUTHWEST 


BUILDINGS 
DESTROYER 
EXTENDING 
MANGANESE 
PROCEEDED 
SPEARHEAD 
CABLEGRAM 
DETENTION 
EXTENSION 
MECHANISM 
PROJECTOR 
STANDARDS 
CAMPAIGNS 
DETERMINE 
EXTENSIVE 
MEMORANDA 
PROMOTION 
STATEMENT 
CANCELLED . DETONATED 
FIFTEENTH 
MESSENGER 
PROPOSALS 
STRAGGLER 
CARTRIDGE 
DETRAINED 
FIREALARM 
MOTORIZED 
PROTECTED 
STRATEGIC 


~AN 
E"IP\C'kiTI A I , 
D-7 


0-8 


CONFIDENTIAL·- 


Table D-1 ~ 
List of words used in military text arranged 
according to word length (D)--Continued 


alphabetically 


SUBMITTED 
SUCCEEDED 
SURRENDER 
SUSPECTED 


ACCEPTABLE 
ACCEPTANCE 
ACCIDENTAL 
ACCORDANCE 
ACTIVITIES 
ADDITIONAL 
AIRCONTROL 
AIRSUPPORT 
ALLEGIANCE 
ALLOCATION 
AMBASSADOR 
AMMUNITION 


ANTEDATING 


ANTICIPATE 


APPARENTLY 


APPEARANCE 
APPROACHED 
ARMOREDCAR 
ARTIFICIAL 
ASPOSSIBLE 
ASSEMBLIES 
ASSESSMENT 
ASSIGNMENT 
ASSISTANCE 
ATOMICBOMB 
ATTACHMENT 


ATTAINMENT 
ATTEMPTING 
AUDIBILITY 


AUTOMOBILE 
BALLISTICS 
BATTLESHIP 


BEENNEEDED 
BRIDGEHEAD 


CAMOUFLAGE 
CAPABILITY 
CASUALTIES 
CENSORSHIP 
CENTRALIZE 
CIRCUITOUS 
COASTGUARD 
COLLECTING 
COLLECTION 


NINE LETTER WORDS- Continued 


SUSPENDED 
SUSPICION 
TECHNICAL 
TECHNIQUE 


TELEPHONE 


TENTATIVE 


TERRITORY 


THEREFORE 
TRANSPORT 


TWENTIETH 


TEN LETTER WORDS 


COLLISIONS 
DESPTACHES 
COMMANDANT 
DESTROYERS 
COMMANDEER 
DETACHMENT 
COMMANDING 
DETERMINED 


COMMISSARY 
DETONATION 
COMMISSION 
DETRAINING 


COMMITMENT 
DETRUCKING 
COMMUNIQUE 
DIFFERENCE 
COMPENSATE 
DIPLOMAnC 
COMPLETELY 
DIRECTIONS 
COMPRESSED 
DISCIPLINE 
CONCERNING 
DISCUSSION 
CONCESSION 
DISPATCHED 
CONCLUSION 
DISPATCHER 
CONDITIONS 
DISPATCHES 
CONFERENCE 
DISPERSION 
CONFESSION 
DISTRESSED 
CONFIDENCE 
DISTRIBUTE 
CONNECTING 
DIVEBOMBER 
CONNECTION 
DOMINATION 
CONSPIRACY 
EFFICIENCY 
CONSTITUTE 
EIGHTEENTH 


CONTINGENT 
ELEMENTARY 


CONTINUOUS 
EMPLOYMENT 
CONTRABAND 
ENCIPHERED 
CONVENIENT 
ENCIRCLING 
COORDINATE 
ENEMYTANKS 
CORRECTION 
ENGAGEMENT 


CREDENTIAL 
ENLISTMENT 
CROSSROADS 
ENROLLMENT 
DEBOUCHING 
ENTERPRISE 
DECIPHERED 
ENTRENCHED 
DECORATION 
ENTRUCKING 
DEDICATION 
EQUIVALENT 


DEFICIENCY 
ESTIMATION 
DEFINITION 
EVACUATING 
DEMOBILIZE 
EVACUATION 


DEPARTMENT 
EVALUATION 


DEPENDABLE 
EXCAVATION 
DEPLOYMENT 
EXCITEMENT 
DEPRESSION 
EXHIBITION 
DESIGNATED 
EXPEDITING 


DESPATCHED 
EXPEDITION 


UNTENABLE 
WEDNESDAY 
VARIATION 
WITNESSES 


WATERTANK 
YESTERDAY 


EXPENDABLE 
MAINTAINED 


EXPERIENCE 
MANAGEMENT 
EXPERIMENT 
MECHANIZED 
EXPLOSIONS 
MEMORANDUM 
EXTINGUISH 
MILLIMETER 


FACILITIES 
MOTORCYCLE 
FLASHLIGHT 
NATURALIZE 


FORMATIONS 
NAVIGATION 
FOUNDATION 
NEGLIGENCE 
FOURTEENTH 
NEWSPAPERS 
FRONTLINES 
NINETEENTH 


GEOGRAPHIC 
OBJECTIVES 
GONIOMETER 
OCCUPATION 
GOVERNMENT 
ONEHUNDRED 
GYROSCOPIC 
OPERATIONS 
HYDROMETER 
OPPOSITION 
HYGROMETER 
OVERCOMING 


ILLITERATE 
PATROLLING 


ILLUMINATE 
PERMISSION 
ILLUSTRATE 
PERSISTENT 
IMPASSABLE 
PHOSPHORUS 
IMPOSSIBLE 
POPULATION 
IMPRESSION 
POSSESSION 
IMPRESSIVE 
POSTOFFICE 
INCENDIARY 
PRECEDENCE 
INDICATING 
PREFERENCE 
INDICATION 
PRESCRIBED 


INDIVIDUAL 
PROHIBITED 
INFLICTING 
PROPORTION 
INSECURITY 
PROTECTION 
INSPECTION 
PROVISIONS 
INSTRUCTED 
QUARANTINE 


INSTRUCTOR 
RECEPTACLE 
INSTRUMENT 
RECREATION 


INTERNMENT 
RECRUITING 
INVITATION 
REENFORCED 
IRRIGATION 
REENLISTED 
KILOMETERS 
REGIMENTAL 


LABORATORY 
REGULATION 


LIEUTENANT 
REINFORCED 
LIMITATION 
RESISTANCE 
LOCOMOTIVE 
RESPECTFUL 
MACHI NEG UN 
RESTRICTED 
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- Table D-1 vz{. List of words used in military text arranged 
according to word length (D)--Continued 


REVOLUTION 
SANITATION 
SEPARATION 
SIGNALLING 
SIMILARITY 
STATISTICS 
SUBMARINES 


ACCESSORIES 
AERONAUTICS 
ACKNOWLEDGE 


ALTERNATING 


APPLICATION 
APPOINTMENT 
APPROACHING 
APPROPRIATE 
APPROXIMATE 


ARBITRATION 


ARMOREDCARS 


ARRANGEMENT 


ASSESSMENTS 
ASSIGNMENTS 
ASSOCIATION 


BATTLEFIELD 


BATTLESHIPS 


BELLIGERENT 


BLOCKBUSTER 


BOMBARDMENT 


CATASTROPHE 
CERTIFICATE 
CIRCULATION 
COEFFICIENT 
COINCIDENCE 
COMMUNICATE 
COMMUNIQUES 
COMPARTMENT 
COMPETITION 
COMPOSITION 
COMPUTATION 


ADVANTAGEOUS 
AGRICULTURAL 
ANNOUNCEMENT 
ANTIAIRCRAFT 
ANTICIPATION 


BREAKTHROUGH 


CANCELLATION 


TEN LETI'ER WORDS- Continued 


SUBMISSION 
SUSPENSION 
SUBSTITUTE 
SUSPICIONS 
SUCCESSFUL 
SUSPICIOUS 
SUCCESSIVE 
THIRTEENTH 


SUFFICIENT 
THREATENED 


SUPPORTING 
TRAJECTORY 


ELEVEN LETTER WORDS 


CONCEALMENT 
EMBARKATION 


CONCENTRATE 
EMPLACEMENT 
CONFINEMENT 
ENCOUNTERED 
CONSTITUTED 
ENEMYPLANES 
CONSUMPTION 
ENFORCEMENT 
CONTINENTAL 
ENGAGEMENTS 


CONTROVERSY 
ENGINEERING 


COOPERATION 
ESTABLISHED 


CORPORATION 
ESTIMATED AT 


CORRECTNESS 
EXAMINATION 


CREDENTIALS 
EXPLANATION 


CUSTOMHOUSE 
EXTENSIVELY 


DEBARKATION 
EXTERMINATE 


DEMONSTRATE 
FINGERPRINT 


DESCRIPTION 
FIRECONTROL 
DESCRIPTIVE 
HEA VYBOMBER 


DESIGNATION 
HEA VYLOSSES 
DESTRUCTION 
HOSTILITIES 


DETERIORATE 
IMMEDIATELY 
DEVELOPMENT 
IMMIGRATION 


DISAPPEARED 
IMPEDIMENT A 


DISCONTINUE 
IMPROVEMENT 
DISCREPANCY 
INCOMPETENT 
DISINFECTED 
INDEPENDENT 


DISPOSITION 
INFLAMMABLE 


DISTINCTION 
INFORMATION 
DISTINGUISH 
INSPIRATION 
DYNAMOMETER 
INSTITUTION 
ECHELONMENT 
INSTRUCTION 
EFFECTIVELY 
INSTRUMENTS 
ELECTRICITY 
INTELLIGENT 


lWEL VE LETTER WORDS 


CARELESSNESS 
COMMENCEMENT 
COMMENDATION 
COMMISSIONED 
COMMISSIONER 
COMPENSATION 
COMPLETENESS 


CONCENTRATED 
CONCILIATION 
CONFIDENTIAL 
CONFIRMATION 
CONFISCATION 
CONFORMATION 
CONSCRIPTION 


TRANSPORTS 
TRANSVERSE 
TROOPSHIPS 


1WENTYFIVE 
UNDERSTAND 


UNDERSTOOD 


INTERCEPTED 


INTERESTING 
INTERFERING 
INTERPRETER 
INTERRUPTED 
INTERVENING 


INVESTIGATE 
LEGISLATION 
LIGHTBOMBER 
MAINTENANCE 
MANUFACTURE 


MEASUREMENT 


NATIONALISM 
NATIONALITY 
NAVALATTACK 


NAVALBATTLE 
NA VALFORCES 
NECESSITATE 
OBSERVATION 
OVERWHELMED 
PARENTHESES 
PARENTHESIS 
PENETRATION 
PERFORMANCE 
PHILIPPINES 
PHOTOGRAPHY 


PREARRANGED 


PREPARATION 
PRELIMINARY 
PROGRESSIVE 


RANGEFINDER 


CONSIDERABLE 
CONSTITUTING 
CONSTITUTION 
CONSTRUCTION 
CONTINUATION 
CONY ALESCENT 
CONVERSATION 
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alphabetically 


UNEXPENDED 


UNSUITABLE 
VICTORIOUS 
VISIBILITY 
WILLATTACK 


WITHDRAWAL 


REAPPOINTED 


RECOGNITION 
RECOMMENDED 
RECONNOITER 
REPLACEMENT 


REQUIREMENT 


REQUISITION 
RESERVATION 
RESIGNATION 
RESPONSIBLE 
RESTRICTION · 
RETALIATION 
RETROACTIVE 
SCHOOLHOUSE 
SEVENTEENTH 
SEVENTYFIVE 
SIGNIFICANT 
SMOKESCREEN 
STRATEGICAL 
SUBSISTENCE 
SUIT ABILITY 
SUPERIORITY 
SURRENDERED 
SYNCHRONIZE 


TEMPERATURE 
THERMOMETER 


TOPOGRAPHIC 


TRADITIONAL 
TRANSFERRED 
WITHDRAWING 


COORDINATION 
DECENTRALIZE 
DECIPHERMENT 
DEMONSTRATED 


DEPARTMENTAL 


DIFFICULTIES 
DISORGANIZED 


D-9 


D-10 


, CONFIO~NTI4L 


Table D-1 U(). List of words used in military text arranged alphabetically 
according to word length (D)--Continued 


DISPLACEMENT 
DISSEMINATED 
DISTRIBUTING 
DISTRIBUTION 
EMPLACEMENTS 


ENCIPHERMENT 
ENTANGLEMENT 


ENTERPRISING 


FIGHTERPLANE 
GENERALALARM 
GENERALST AFF 
GEOGRAPHICAL 


HEADQUARTERS 


HEA VYBOMBERS 


ACCOMMODATION 
APPROXIMATELY 
CHRONOLOGICAL 
CIRCUMSTANCES 


COMMUNICATION 
CONCENTRATING 
CONCENTRATION 


CONGRESSIONAL. 
CONSIDERATION 


lWELVE LETTER WORDS-Continued 


HYDROGRAPHIC 


ILLUMINATING 
ILLUMINATION 


ILLUSTRATION 
INAUGURATION 


INCOMPETENCE 
INEFFICIENCY 


INSTRUCTIONS 


INTELUGENCE 
INTERCEPTION 
INTERDICTION 
INTERFERENCE 
INTERMEDIATE 
INTERRUPTION 


INTERVENTION 


INTRODUCTION 
INTRODUCTORY 
IRREGULARITY 


LIGHTBOMBERS 


MARKSMANSHIP 
MEASUREMENTS 
MEDIUMBOMBER 
MOBILIZATION 


NONCOMBATANT 


NORTHWESTERN 
OBSTRUCTIONS 
ORGANIZATION 
PREPARATIONS 


PREPAREDNESS 
PRESERVATION 
PRESIDENTIAL 
PROCLAMATION 
PSYCHROMETER 
RADIOSTA TION 


RECREATIONAL 


REENLISTMENT 
REGISTRATION 
REPLACEMENTS 
RESPECTFULLY 


ROADJUNCTION 


SATISFACTORY 
SEARCHLIGHTS 


SHARPSHOOTER 


SIGNIFICANCE 


SIMULTANEOUS 
SOUTHWESTERN 
SUBSTITUTION 
SUCCESSFULLY 
TRANSFERRING 
TRANSMISSION 
TRANSPACIFIC 


UNIDENTIFIED 


UNITEDST A TES 
UNSUCCESSFUL 


VERIFICATION 
VETERINARIAN 


THIRTEEN LETTER WORDS 


CORRESPONDING 


COUNTERATTACK 
DECENTRALIZED 


DEMONSTRATION 
DEPENDABIUTY 


DETERMINATION 


DISAPPEARANCE 
DISCREPANCIES 
DISSEMINATION 


DISTINGUISHED 


ENTERTAINMENT 


ESTABLISHMENT 


EXTERMINATION 
EXTRAORDINARY 
FIGHTERPLANES 
IMPRACTICABLE 
INDETERMINATE 


INSTALLATIONS 


INSTANTANEOUS 
REAPPOINTMENT 


INTERNATIONAL 
REENFORCEMENT 


INVESTIGATION 
REIMBURSEMENT 


MEDIUMBOMBERS 
REINFORCEMENT 


MISCELLANEOUS 
REINSTATEMENT 


PREUMINARIES 
REVOLUTIONARY 
QUALIFICATION 
SPECIFICATION 
QUARTERMASTER ·TRANSATLANTIC. 


FOURTEEN LETTER WORDS 


ADMINISTRATION 


ADMINISTRATIVE 
CENTRALIZATION 
CHARACTERISTIC 
CIRCUMSTANTIAL 


CLASSIFICATION 
CORRESPONDENCE 


DEMOBIUZA TION 
DISCONTINUANCE 
DISTINGUISHING 


IDENTIFICATION 
INTERPRETATION 


INVESTIGATIONS 


IRREGULARITIES 
METEOROLOGICAL 
NATURAUZATION 


RECOMMENDATION 


RECONNAISSANCE 


RECONNOITERING 


RECONSTRUCTION 
REORGANIZATION 
REPRESENTATIVE 
RESPONSIBILITY 
SATISFACTORILY 
TRANSPORTATION 
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Table D-2 (~. Ust of words used in military text arranged alphabetically 
in reverse order according to word length (U) 


THREE LETTER WORDS 


SEA 
SEE 
MAJ 
TAN 
TOP 
EAT 
BUT 
FIX 
JOB 
AGE 
AbJ 
GEN 
GHQ 
MAT 
CUT 
MIX 
ROB 
SHE 
ASK 
MEN 
BAR 
VAT 
OUT 
SIX 
TUB 
THE 
GAL 
PEN 
CAR 
ACT 
PUT 
BOX 
QMC 
DIE 
ALL 
TEN 
FAR 
GET 
PVT 
FOX 
ARC 
ONE 
ILL 
PIN 
PAR 
LET 
CWT 
DAY 


BAD 
ARE 
COL 
TIN 
WAR 
NET 
YOU 
LAY 
HAD 
USE 
CPL 
TON 
HER 
SET 
CAY 
MAY 


ADD 
DUE 
CAM 
WON 
PER 
WET 
LAW 
PAY 
RED 
OWE 
HAM 
DUN 
AIR 
YET 
SAW 
SAY 


AID 
EYE 
AIM 
GUN 
FOR 
SGT 
FEW 
WAY 


BID 
OFF 
HIM 
RUN 
OUR 
WGT 
NEW 
ANY 


DID 
BAG 
ARM 
SUN 
GAS 
FIT 
HOW 
SPY 


RID 
KEG 
SUM 
OWN 
HAS 
GOT 
LOW 
DRY 
OLD 
BIG 
CAN 
AGO 
WAS 
LOT 
NOW 
TRY 


AND 
JIG 
MAN 
TOO 
HIS 
NOT 
TAX 
BUY 


END 
DOG 
NAN 
TWO 
ITS 
APT 


FOUR LETTER WORDS 


AREA 
MIKE 
BASE 
WEEK 
WELL 
NOON 
PASS 
LIST 
ASIA 
YOKE 
FUSE 
TALK 
HILL 
SOON 
LESS 
LOST 
BULB 
ABLE 
DATE 
BULK 
WILL 
DOWN 
MESS 
POST 
BOMB 
. FILE 
LATE 
RANK 
FULL 
TOWN 
LOSS 
JUST 
HEAD· 
MILE 
NOTE 
SANK. 
TOOL 
ZERO 
HITS 
ROUT 


LEAD 
MULE 
BLUE 
TANK 
TEAM 
ALSO 
DAYS 
NEXT 


LOAD 
RULE 
HAVE 
SUNK 
THEM 
INTO 
MEAT 
TEXT 


ROAD 
SAME 
FIVE 
BOOK 
ITEM 
KEEP 
THAT 
LIEU 


RAID 
TIME 
LOVE 
COOK 
MAIM 
SHIP 
WHAT 
DRAW 
SAID 
SOME 
MOVE 
HOOK 
FROM 
DUMP 
FEET 
XRAY 
HOLD 
LINE 
FUZE 
LOOK 
FARM 
PUMP 
MEET 
AWAY 


HAND 
MINE 
HALF 
TOOK 
FIRM 
STOP 
LEFT 
BODY 


LAND 
NINE 
FLAG 
DARK 
FORM 
NEAR 
OMIT 
THEY 


KIND 
ZONE 
KING 
PARK 
THAN 
REAR 
UNIT 
ALLY 


HARD 
JUNE 
LONG 
MASK 
PLAN 
OVER 
HALT 
ONLY 


HERD 
OBOE 
EACH 
TASK 
BEEN 
FOUR 
TENT 
JULY 
ONCE 
PIPE 
HIGH 
ORAL 
SEEN 
YOUR 
SHOT 
ARMY 


MADE 
TYPE 
DASH 
MTCL 
THEN 
EYES 
RIOT 
MANY 
AIDE 
TARE 
PUSH 
FEEL 
WHEN 
THIS 
DIRT 
VARY 


SIDE 
HERE 
RUSH 
RAIL 
OPEN 
AXIS 
EAST 
VERY 
CODE 
WERE 
WITH 
CALL 
MAIN 
TONS 
FAST 
EASY 


FLEE 
FIRE 
BOTH 
FALL 
RAIN 
GUNS 
LAST 
CITY 


EDGE 
WIRE 
LEAK 
CELL 
JOIN 
MASS 
WEST 
NAVY 
TAKE 
MORE 
BACK 
FELL 
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Table D-2 ~. List of words used in military text arranged alphabetically 
in reverse order according to word length (D)--Continued 


FIVE LEITER WORDS 


COMMA 
SCALE 
ALONG 
CANAL 
WAGON 
PRIOR 
DRESS 
START 
ZEBRA 
TITLE 
AMONG 
FATAL 
UNION 
MAJOR 
PRESS 
ALERT 
SQUAD 
ALINE 
BEACH· 
VITAL 
COLON 
VALOR 
CROSS 
LEAST 
SPEED 
SLOPE 
REACH 
TOTAL 
DRAWN 
ARMOR 
FLATS 
COAST 
WIPED 
FLARE 
WHICH 
EQUAL 
RADIO 
HONOR 
BOATS 
CREST 
RIGID 
THERE 
MARCH 
USUAL 
EQUIP 
ERROR 
RAFTS 
GUEST 


RAPID 
WHERE 
WEIGH 
NAVAL 
TROOP 
MOTOR 
UNITS 
FIRST 


FIELD 
SHORE 
FRESH 
WHEEL 
GROUP 
AREAS 
TRACT 
BURST 


BLIND 
CEASE 
WIDTH 
STEEL 
CLEAR 
BOMBS 
FLEET 
ABOUT 
GUARD 
ERASE 
FIFTH 
REPEL 
SUGAR 
RAIDS 
QUIET 
ALLOW 


AWARD 
THESE 
TENTH 
LEVEL 
UNDER 
WOODS 
ASSET 
ANNEX 
THIRD 
CLOSE 
NINTH 
APRIL 
ORDER 
YARDS 
SHIFT 
TODAY 


BRIBE 
HORSE 
BOOTH 
SMALL 
DEFER 
MILES 
EIGHT 
DELAY 


PLACE 
CAUSE 
DEPTH 
SHELL 
REFER 
FIRES 
FIGHT 
READY 


VOICE 
HOUSE 
NORTH 
SPELL 
EAGER 
. CASES 
LIGHT 
FOGGY 
FORCE 
ROUTE 
SOUTH 
DRILL 
ROGER 
GATES 
NIGHT 
DAILY 


TRUCE 
ISSUE 
SIXTH 
ALARM 
ETHER 
PACKS 
RIGHT 
RALLY 
THREE 
LEAVE 
BREAK 
JAPAN 
OTHER 
DECKS 
SIGHT 
APPLY 


RIDGE 
DRIVE 
BLACK 
QUEEN 
BAKER 
DOCKS 
AWAIT 
EARLY 


SIEGE 
PROVE 
CHECK 
TAKEN 
LATER 
BANKS 
SPLIT 
ENEMY 
RANGE 
CURVE 
QUICK 
SEVEN 
METER 
TANKS 
LIMIT 
EVERY 
BARGE 
SEIZE 
TRUCK 
GIVEN 
PETER 
PLANS 
VISIT 
FERRY 
LARGE 
-CHIEF 
CREEK 
ALIGN 
AFTER 
SHIPS 
AGENT 
FIFTY 


GAUGE 
STAFF 
FLANK 
AGAIN 
ENTER 
CORPS 
POINT 
PARTY 
STAKE 
PROOF 
CLERK 
PLAIN 
RIVER 
FEARS 
FRONT 
FORTY 
SMOKE 
BEING 
LOCAL 
TRAIN 
COVER 
PAIRS 
COUNT 
SIXTY 
BROKE 
GOING 
VOCAL 
BEGIN 
THEIR 
HOURS 
DEPOT 
HEAVY 


SIX LETTER WORDS 


CANADA 
HALTED 
DEVICE 
CHARGE 
SEVERE 
ARRIVE 
TRENCH 
MANUAL 


ARABIA 
ROUTED 
NOVICE 
GEORGE 
RETIRE 
ACTIVE 
LAUNCH 
ANNUAL 


ALASKA 
LIQUID 
FIERCE 
REFUGE 
ENTIRE 
TWELVE 
SEARCH 
CASUAL 
PANAMA 
INLAND 
REDUCE 
MORALE 
BEFORE 
BREEZE 
CHURCH 
VISUAL 
METRIC 
ISLAND 
PARADE 
UNABLE 
SECURE 
RELIEF 
SWITCH 
CANCEL 
CRITIC 
DEFEND 
DECIDE 
CIRCLE 
ASSURE 
ZIGZAG 
THOUGH 
VESSEL 


BOMBED 
OFFEND 
DIVIDE 
SINGLE 
FUTURE 
RIDING 
FINISH 
DETAIL 
BARBED 
DEPEND 
DECODE 
MOBILE 
GREASE 
FILING 
EIGHTH 
REFILL 
RAIDED 
EXPEND 
ENCODE 
BEETLE 
CHEESE 
LINING 
FOURTH 
ENROLL 


LANDED 
INTEND 
COFFEE 
BATTLE 
ADVISE 
MINING 
ATTACK 
SCHOOL 
WOODED 
EXTEND 
DECREE 
SETTLE 
DEVISE 
FIRING 
DEBARK 
PATROL 


INDEED 
SECOND 
DEGREE 
LITTLE 
OPPOSE 
WIRING 
EMBARK 
PISTOL 


ALLIED 
BEYOND 
STRAFE 
NOZZLE 
COURSE 
DURING 
VERBAL 
SYSTEM 


KILLED 
GROUND 
ENGAGE 
MUZZLE 
REFUSE 
NOTING 
RADIAL 
VICTIM 
FORMED 
METHOD 
DAMAGE 
SCHEME 
LOCATE 
MOVING 
SERIAL 
SIGCOM 


DOWNED 
PERIOD 
MANAGE 
RESUME 
EXCITE 
FLYING 
ANIMAL 
BOTTOM 
SCORED 
RECORD 
GARAGE 
ENGINE 
MINUTE 
BREACH 
FORMAL 
INFORM 
PASSED 
OFFICE 
BRIDGE 
RAVINE 
RESCUE 
DETACH 
NORMAL 
MEDIUM 


CAUSED 
POLICE 
ALLEGE 
EUROPE 
LEAGUE 
ATTACH 
SIGNAL 
SUDDEN 


UNITED 
ADVICE 
CHANGE 
SPHERE 
PURSUE 
BRANCH 
POSTAL 
SCREEN 
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Table D-2 ~. List of words used in military text arranged alphabetically 
in reverse order according to word length (D)--Continued 


SIX LETTER WORDS-Continued 


SUNKEN 
MORTAR 
RUNNER 
FORCES 
COLORS 
TARGET 
CANNOT 
MONDAY 
BROKEN 
RUBBER 
KEEPER 
BARGES 
ACCESS 
PICKET 
ACCEPT 
SUNDAY 
SEAMEN 
MEMBER 
HELPER 
BODIES 
EXCESS 
ROCKET 
EXCEPT 
ANYWAY 
HAPPEN 
BOMBER 
PROPER 
ALLIES 
UNLESS 
BILLET 
PROMPT 
REMEDY 


BATTEN 
NUMBER 
NEARER 
ARMIES 
STRESS 
TURRET 
DEPART 
VALLEY 
ELEVEN 
PINCER 
ERASER 
TABLES 
ACROSS 
SUNSET 
DESERT 
PARLEY 


REMAIN 
LEADER 
CENTER 
PLANES 
ASSETS 
WEIGHT 
DIVERT 
CONVEY 


ATTAIN 
LADDER 
BETTER 
PASSES 
VISITS 
FLIGHT 
ESCORT 
SURVEY 


WITHIN 
MURDER 
LETTER 
LOSSES 
POINTS 
SLIGHT 
EFFORT 
VERIFY 
COLUMN 
PREFER 
BITTER 
STATES 
STATUS 
NAUGHT 
REPORT 
SUPPLY 
RATION 
SUFFER 
LITTER 
ROUTES 
ALWAYS 
FOUGHT 
ARREST 
HOURLY 
ACTION 
MEAGER 
AFFAIR 
ISSUES 
COMBAT 
NOUGHT 
RESIST 
DEPLOY 
COMMON 
HIGHER 
REPAIR 
CRISIS 
DEFEAT 
CREDIT 
ASSIST 
EMPLOY 
SUMMON 
CIPHER 
HARBOR 
SHELLS 
THREAT 
SUBMIT 
AUGUST 
CONVOY 
POISON 
EITHER 
TERROR 
SPOOLS 
DEFECT 
COMMIT 
ADJUST 
OCCUPY 
LESSON 
TANKER 
MIRROR 
TRAINS 
EFFECT 
SUMMIT 
DUGOUT 
SALARY 
PONTON 
HAMMER 
SECTOR 
SPOONS 
REJECT 
RESULT 
OUTPUT 
ARMORY 
RETURN 
SUMMER 
VICTOR 
STRIPS 
SELECT 
ORIENT 
BUREAU 
Nl;'\iETY 
DRYRUN 
BANNER 
DOCTOR 
TROOPS 
EXPECT 
INTENT 
REVIEW 
EIGHTY 
TATTOO 
MANNER 
CANVAS 
ORDERS 
DIRECT 
EXTENT 
FOLLOW 
TWENTY 
APPEAR 
GUNNER 
PLACES 
OTHERS 
STREET 
INVENT 
FRIDAY 
THIRTY 
DOLLAR 


SEVEN LEITER WORDS 


MILITIA 
RETIRED 
WINDAGE 
DECLARE 
COMMUTE 
FISHING 
VARYING 


ANTENNA 
ARMORED 
BAGGAGE 
PREPARE 
REVENUE 
PUSHING 
ICEBERG 
ALMANAC 
PRESSED 
PACKAGE 
CALIBRE 
RELIEVE 
NOTHING 
DEBOUCH 
BIVOUAC 
CROSSED 
VILLAGE 
MISFIRE 
RECEIVE 
TALKING 
THROUGH 
TRAFFIC 
OMITTED 
TONNAGE 
INSPIRE 
PASSIVE 
SINKING 
FUR.NISH 
PACIFIC 
DELAYED 
AVERAGE 
REQUlRE 
CAPTIVE 
SMOKING 
TWELFTH 


ASIATIC 
COMMAND 
STORAGE 
INQUIRE 
REVOLVE 
FALLING 
SEVEi'iTH 
REDUCED 
COMMEND 
BARRAGE 
LECTURE 
APPROVE 
FILLING 
SETBACK 
INVADED 
SUSPEND 
PASSAGE 
RELEASE 
OBSERVE 
KILLING 
DERRICK 
DECIDED 
RESPOND 
MESSAGE 
DISEASE 
RESERVE 
EVENING 
DETRUCK 
DECODED 
BOMBARD 
COLLEGE 
SUNRISE 
ANALYZE 
RAINING 
ENTRUCK 
ENCODED 
AWKWARD 
ARRANGE 
LICENSE 
JUMPOFF 
MANNING 
MEDICAL 


WO.UNDED 
FORWARD 
WITH THE 
DEFENSE 
BOMBING 
RUNNING 
LOGICAL 
GUARDED 
REPLACE 
THATTHE 
OFFENSE 
PLACING 
MORNING 
CONCEAL 
PROCEED 
SERVICE 
CHARLIE 
PROPOSE 
FORCING 
SLOPING 
ILLEGAL 
ENGAGED 
ADVANCE 
PRAIRIE 
SLPPOSE 
HEADING 
MAPPING 
MARSHAL 


DAMAGED 
ABSENCE 
VISIBLE 
PURPOSE 
LEADING 
BEARING 
INITIAL 


REACHED 
ENFORCE 
BICYCLE 
REVERSE 
LOADING 
GASSING 
MARTIAL 


MARCHED 
BRIGADE 
HOSTILE 
BEC AL:SE 
BEDDING 
MESSING 
FEDERAL 


WRECKED 
GRENADE 
EXTREME 
\1ANDATE 
RAIDING 
MISSING 
GENERAL 


SHELLED 
PRECEDE 
CONFINE 
RADIATE 
HOLDING 
LIFTING 
SEVERAL 
DROPPED 
OUTSIDE 
MACHINE 
OPERATE 
LANDING 
HALTING 
CENTRAL 
STOPPED 
INCLUDE 
ROUTINE 
ELEVATE 
BINDING 
GETTING 
NATURAL 
HUNDRED 
EXCLUDE 
CYCLONE 
ENTESTE 
FINDING 
FITTING 
COASTAL 


ORDERED 
REFUGEE 
WARFARE 
PROMOTE 
FORGING 
ISSUING 
GRADUAL 
COVERED 
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Table D-2 ~ 
List of words used in military text arranged alphabetically 
in reverse order according to word length (D)--Continued 


SEVEN LEITER WORDS-Continued 


UNUSUAL 
ENTRAIN 
ENVELOP 
STARTER 
SUCCESS 
ASSAULT 
RAILWAY 
ARRIVAL 
CONTAIN 
SIMILAR 
QUARTER 
USELESS 
INSTANT 
SECRECY 
CHANNEL 
CAPTAIN 
REGULAR 
DELIVER 
ILLNESS 
ELEMENT 
VACANCY 
COLONEL 
CONDEMN 
CALIBER 
RECOVER 
WITNESS 
COMMENT 
SIGNIFY 
COUNCIL 
ABANDON 
OCTOBER 
AVIATOR 
ADDRESS 
CURRENT 
SATISFY 
FUELOIL 
OPINION 
OFFICER 
TRACTOR 
EXPRESS 
PRESENT 
RAPIDLY 
INSTALL 
SESSION 
POUNDER 
VISITOR 
DISMISS 
APPOINT 
QUICKLY 
DISTILL 
MISSION 
TRIGGER 
TACTICS 
DISCUSS 
RECEIPT 
NIGHTLY 
PAYROLL 
STATION 
WEATHER 
ISLANDS 
TARGETS 
ATTEMPT 
SHORTLY 
CONTROL 
SECTION 
WHETHER 
CHANGES 
SURPLUS 
SUPPORT 
COMPANY 
WILLIAM 
ECHELON 
ANOTHER 
ENEMIES 
RETREAT 
SUGGEST 
DESTROY 
DIAGRAM 
BALLOON 
FARTHER 
BATTLES 
EXTRACT 
ffiGHEST 
PRIMARY 
PROGRAM 
PLATOON 
FURTHER 
GLASSES 
CONTACT 
NEAREST 
SUMMARY 
MINIMUM 
LIAISON 
SOLDIER 
CHASSIS 
COLLECT 
PROTEST 
LIBRARY 


MAXIMUM 
HORIZON 
CARRIER 
ATTACKS 
RESPECT 
REQUEST 
JANUARY 
HASBEEN 
EASTERN 
COURIER 
VESSELS 
CORRECT 
AGAINST 
BRIBERY 


FIFTEEN 
WESTERN 
HEAVIER 
PATROLS 
PROTECT 
OUTPOST 
BATTERY 
SIXTEEN 
FOGHORN 
TRAWLER 
BOMBERS 
INFLICT 
PROVOST 
INQUIRY 


BETWEEN 
UNKNOWN 
STEAMER 
NUMBERS 
CONDUCT 
BOYCOTT 
CAVALRY 
KITCHEN 
TOBACCO 
CLIPPER 
REPAIRS 
TONIGHT 
WITHOUT 
VICTORY 


WRITTEN 
TORPEDO 
CRUISER 
SAILORS 
CIRCUIT 
LOOKOUT 
EMBASSY 


EXPLAIN 
WARSHIP 
AMMETER 
SECTORS 
RECRUIT 
SIMPLEX 
UTILITY 


TERRAIN 
DEVELOP 
FIGHTER 
COMPASS 
PURSUIT 
TUESDAY 
SEVENTY 


DETRAIN 


EIGHT LETTER WORDS 


INSIGNIA 
EXPELLED 
DICTATED 
STANDARD LANGUAGE ENVELOPE 
OPPOSITE 
SPECIFIC 
ENROLLED EFFECTED 
OUTBOARD DISLODGE 
INSECURE 
CONTINUE 
TERRIFIC 
DISARMED 
INFECTED 
OUTGUARD EXCHANGE PRESSURE 
CRITIQUE 
ECONOMIC 
ASSIGNED 
REJECTED 
WINDWARD PROBABLE 
DECREASE 
THATHAVE 
MECHANIC 
RETURNED SELECTED 
EASTWARD SUITABLE 
EXERCISE 
DECISIVE 
ATLANTIC 
APPEARED 
BILLETED 
WESTWARD ELIGIBLE 
SURPRISE 
POSITIVE 


RAILHEAD 
DECLARED INVENTED 
DESCRIBE 
TERRIBLE 
SUSPENSE 
PRESERVE 


RAILROAD PREPARED 
DEPARTED ORDNANCE POSSIBLE 
DISPERSE 
EQUALIZE 
REPLACED 
HINDERED 
DESERTED 
DISTANCE 
FLEXIBLE 
TRAVERSE MOBILIZE 
ADVANCED SUFFERED 
ESCORTED 
COMMENCE ASSEMBLE 
DEDICATE 
INVADING 
DEMANDED CENTERED DEPORTED 
SENTENCE 
OBSTACLE 
INDICATE 
DIVIDING 


EXPANDED BATTERED REPORTED 
ANNOUNCE ENCIRCLE 
INITIATE 
BUILDING 


DEFENDED LETTERED 
ARRESTED 
COMMERCE SCHEDULE 
ESTIMATE 
GUARDING 


OFFENDED REPAIRED 
ENLISTED 
ENFILADE 
MARITIME 
ORDINATE 
ENGAGING 
EXPENDED 
REQUIRED 
SURVIVED 
CONCLUDE AIRDROME DETONATE DAMAGING 
EXTENDED RESTORED IMPROVED 
LATITUDE 
AIRPLANE 
SEPARATE 
MARCHING 


GROUNDED DEFERRED OBSERVED 
ALTITUDE 
JETPLANE 
EVACUATE BREAKING 


BESIEGED 
CAPTURED 
REVIEWED 
EMPLOYEE 
MEDICINE 
EXCAVATE FLANKING 


DETACHED REPULSED 
DEPLOYED 
CARRIAGE 
DOCTRINE 
OBSOLETE 
TOTALING 
FINISHED 
COMPOSED AIRFIELD 
FUSELAGE 
POSTPONE 
COMPLETE 
SHELLING 
OCCUPIED 
MANDATED FOOTHOLD EQUIPAGE 
SEABORNE CONCRETE 
BATTLING 


ATTACKED DEFEATED THOUSAND FRONTAGE AIRBORNE 
EXPEDITE 
SWIMMING 
REPELLED 
REPEATED 
SURROUND SABOTAGE 
DEVELOPE 
DEFINITE 
TRAINING 
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Table D-2 ye5. List of words used in military text arranged alphabetically 
in reverse order according to word length (D)--Continued 


EIGHT LETTER WORDS-Continued 


PLANNING 
ELEVENTH CAMPAIGN 
PRISONER 
VEHICLES 
RESPECTS 
WITHDRAW 


SWEEPING 
ANTITANK 
CHAPLAIN 
IMPROPER 
MISFIRES 
ELEMENTS 
WITHDREW 


SHIPPING 
CODEBOOK MAINTAIN 
REPEATER 
DEFENSES 
ATTEMPTS 
TOMORROW 


GROUPING 
CHEMICAL 
MOUNTAIN DESERTER 
EXPENSES 
PROTESTS 
PARALLAX 


ENTERING 
CLERICAL 
BULLETIN 
DISASTER 
PURPOSES 
OUTPOSTS 
SATURDAY 
COVERING 
TACTICAL 
INVASION 
REGISTER 
RESERVES 
ENORMOUS THURSDAY 


RETIRING 
CRITICAL 
DECISION 
CANISTER 
ANALYSIS 
LUMINOUS 
CAUSEWAY 
ADVISING 
NAUTICAL 
DIVISION 
RECEIVER 
BARRACKS RIGOROUS 
EFFICACY 
OPPOSING 
OFFICIAL 
LOCATION 
REVOLVER MISSIONS 
VIGOROUS 
IDENTIFY 


DRESSING 
MATERIAL 
AVIATION 
OBSERVER STATIONS 
CONTRACT STRATEGY 
PRESSING 
MEMORIAL CITATION 
MANEUVER FACTIONS 
INDIRECT 
PROBABLY 
CROSSING 
NATIONAL 
TAXATION 
EMPLOYER PONTOONS 
CONFLICT 
ASSEMBLY 


DRIFTING 
INTERNAL 
JUNCTION 
HOWITZER 
WARSHIPS 
DISTRICT 
ACTUALLY 


FIGHTING 
CORPORAL IGNITION 
CORRIDOR OFFICERS 
INSTRUCT 
MONOPOLY 
SIGHTING 
HOSPITAL 
POSITION 
SUPERIOR 
SOLDIERS 
AIRCRAFT 
EASTERLY 


LIMITING 
APPROVAL FORENOON INTERIOR 
CARRIERS 
DAYLIGHT 
WESTERLY 
PAINTING 
MATERIEL 
SQUADRON EXTERIOR 
TRAILERS 
MIDNIGHT 
BOUNDARY 


PRINTING 
PARALLEL 
GARRISON 
OPERATOR TRAWLERS PROHIBIT 
MILITARY 


SPOTTING 
SENTINEL 
NORTHERN DICTATOR 
CRUISERS 
SERGEANT 
SANITARY 


DELAYING 
SEALEVEL 
SOUTHERN REJECTOR 
FIGHTERS 
DOMINANT 
FEBRUARY 
RALLYING 
PROTOCOL CIRCULAR 
DIRECTOR 
QUARTERS ADJUTANT 
CEMETERY 
CARRYING 
MERCIFUL 
DECEMBER DETECTOR CARELESS 
ADJACENT 
ADVISORY 


FERRYING 
TELEGRAM REMEMBER ASSOONAS 
WIRELESS 
INCIDENT 
INFANTRY 


APPROACH 
AMERICAN 
NOVEMBER POLITICS 
BUSINESS 
ARMAMENT CAPACITY 
ENTRENCH EUROPEAN DEFENDER COMMANDS DARKNESS 
MOVEMENT FATALITY 


INTRENCH 
CIVILIAN 
RECORDER ADVANCES CONGRESS 
REGIMENT 
CALAMITY 
RESEARCH HA VEBEEN ENGINEER 
BARRAGES PROGRESS 
APPARENT 
VICINITY 
DESPATCH 
NINETEEN 
TRANSFER 
MESSAGES 
FORTRESS 
PASSPORT 
PRIORITY 
DISPATCH 
EIGHTEEN 
DECIPHER 
REMEDIES 
DISTRESS 
INTEREST 
ACTIVITY 
SKIRMISH 
THIRTEEN 
ENCIPHER 
SUPPLIES 
REDCROSS · REENLIST 
CASUALTY 
DIMINISH 
FOURTEEN 


NINE LETTER WORDS 


MEMORANDA 
CANCELLED 
IMPRESSED 
ATTEMPTED 
ASSURANCE 
AERODROME 
STRATEGIC 
COMPELLED 
DISCUSSED 
PROTESTED 
ALLOWANCE 
HURRICANE 
AUTOMATIC 
DETRAINED 
INDICATED 
REQUESTED 
INCIDENCE 
AEROPLANE 
PATRIOTIC 
ENTRAINED 
POPULATED 
SUBMITTED 
REFERENCE 
INTERVENE 


BALLISTIC 
CONDEMNED 
ESTIMATED 
CONTINUED 
INFLUENCE 
FRONTLI:\E 
BEACHHEAD 
ECHELONED 
DOMINATED 
DESTROYED 
REENFORCE 
DETERMINE 


SPEARHEAD 
DEVELOPED 
DETONATED 
MOTORIZED 
REINFORCE 
TELEPHONE 
DESCRIBED 
CONQUERED 
SUSPECTED 
SEMIRIGID 
LONGITUDE 
INTERFERE 


ANNOUNCED 
PREFERRED 
CORRECTED 
RECOMMEND 
COMMITTEE 
ELSEWHERE 
BLOCKADED 
CONFERRED 
PROTECTED 
REARGUARD 
ADVANTAGE 
SHELLFIRE 
SUCCEEDED 
DECREASED 
INFLICTED 
NORTHWARD 
CARTRIDGE 
THEREFORE 


PROCEEDED 
INCREASED 
COMPLETED 
SOUTHWARD 
CHALLENGE 
PROCEDURE 
COMMANDED 
CONDENSED 
INHABITED 
AMBULANCE 
AVAILABLE 
PREMATL'RE 
SUSPENDED 
COLLAPSED 
EXHIBITED 
DOMINANCE 
UNTENABLE 
DEPARTURE 


BOMBARDED 
DISPERSED 
ASSAULTED 
CLEARANCE 
DIRIGIBLE 
NAVALBASE 


FORTIFIED 
ADDRESSED 
APPOINTED 
ENDURANCE 
PRINCIPLE 
MANGANESE 
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Table D-2 ~ 
List of words used in military text arranged alphabetically 


CRITICISE 
INTERPOSE 
ASSOCIATE 


IMMEDIATE 


OSCILLATE 
CIRCULATE 
DESIGNATE 


ALTERNATE 


COOPERATE 


ELABORATE 
PENETRATE 


REINSTATE 
CIGARETTE 
PARACHUTE 
DESTITUTE 
TECHNIQUE 
EXPANSIVE 
DEFENSIVE 
OFFENSIVE 
EXPENSIVE 
INTENSIVE 
EXTENSIVE 
EXPLOSIVE 
EXCESSIVE 
INCLUSIVE 
EXCLUSIVE 


TENTATIVE 


DEFECTIVE 
EFFECTIVE. 
OBJECTIVE 
INCENTIVE 
EXECUTIVE 
RECOGNIZE 
SERVICING 
ADVANCING 
PRECEDING 


EXTENDING 


ATOMICBOMB 
GEOGRAPHIC 
GYROSCOPIC 
DIPLOMATIC 


BRIDGEHEAD 


PRESCRIBED· 
REENFORCED 
REINFORCED 


BEENNEEDED 
UNEXPENDED 


in reverse order according to word length (D)--Continued 


l\'INE LEITER WORDS-Continued 


REGARDING 
PERSONNEL 
INVENTION 
CONTINUES 
STATEMENT 
ACCORDING 
CABLEGRAM 
PROMOTION 
BUILDINGS 
EQUIPMENT 


INCLUDING 
RADIOGRAM 
SEMICOLON 
OFFICIALS 
GROUPMENT 
LAUNCHING 
FIRE ALARM 
AFTERNOON 
REPRISALS 
INTERMENT 


ATTACKING 
CRITICISM 
DISAPPEAR 
PROPOSALS 
ALLOTMENT 
DEBARKING 
MECHANISM 
IRREGULAR 
CIVILIANS 
PERMANENT 
REFILLING 
DIETITIAN 
SEPTEMBER 
CAMPAIGNS 
DIFFERENT 


SCREENING 
SEVENTEEN 
COMMANDER 
MAINTAINS 
REPRESENT 


REMAINING 
SUSPICION 
SURRENDER 
DIVISIONS 
RESTRAINT 


OBTAINING 
BATTALION 
REMAINDER 
MUNITIONS 
INTERCEPT 
INCLINING 
REBELLION 
PASSENGER 
POSITIONS 
INTERRUPT 
BEGINNING 
COLLISION 
MESSENGER 
ENGINEERS 
TRANSPORT 


RETURNING 
PROVISION 
BRIGADIER 
PRISONERS 
NORTHEAST 


PREPARING 
EXPANSION 
STRAGGLER 
READINESS 
SOUTHEAST 


NUMBERING 
ASCENSION 
NEWSPAPER 
CONFLICTS 
NORTHWEST 
CENTERING 
DIMENSION 
CHARACTER 
DISTRICTS 
SOUTHWEST 


REQUIRING 
EXTENSION 
KILOMETER 
INCIDENTS 
INTERVIEW 


OPERATING 
EXPLOSION 
BAROMETER 
MOVEMENTS 
YESTERDAY 
ENLISTING 
ADMISSION 
GYROMETER 
OUTSKIRTS 
WEDNESDAY 
RECEIVING 
EXCLUSION 
DESTROYER 
ANONYMOUS 
EMERGENCY 


REVIEWING 
RADIATION 
PROJECTOR 
APPARATUS 
NORTHERLY 
EMPLOYING 
VARIATION 
PROTECTOR 
DISINFECT 
SERIOUSLY 
OCCUPYING 
INFLATION 
CHAUFFEUR 
INTERDICT 
INSTANTLY 
PARAGRAPH 
FORMATION 
LOGISTICS 
DIFFICULT 
ACCOMPAr.."Y 
ESTABLISH 
OPERATION 
STANDARDS 
COMBATANT 
ARBITRARY 
TWENTIETH 
SITUATION 
RESOURCES 
IMPORTANT 
NECESSARY 


FIFTEENTH 
ELEVATION 
COMPANIES 
ASSISTANT 
SECRETARY 
SIXTEENTH 
OBJECTION 
BATTERIES 
CONFIDENT 
ARTILLERY 
WATERTANK 
DIRECTION 
EMBASSIES 
PRE'SIDENT 
ACCESSORY 
TECHNICAL 
CONDITION 
AIRDROMES 
DEPENDENT 
TERRITORY 
CHRONICAL 
COALITION 
SEAPLANES 
NEGLIGENT 
LIABILITY 


PRACTICAL 
PARTITION 
AIRPLANES 
DEFICIENT 
HOSTILITY 
POLITICAL 
DETENTION 
EXERCISES 
EFFICIENT 
PROXIMITY 
IDENTICAL 
RETENTION 
WITNESSES 
PLACEMENT 
INDEMNITY 


PRINCIPAL 
INTENTION 
ADDRESSES 
AGREEMENT 
INTEGRITY 


DISMISSAL 
ATTENTION 
ESTIMATES 
AMUSEMENT 
NECESSITY 
CONTINUAL 


TEN LETTER WORDS 


APPROACHED 
ENTRENCHED 
DESPATCHED 
DISPATCHED 


THREATENED 
MAINTAINED 
DETERMINED 
ONEHUNDRED 


DECIPHERED 
ENCIPHERED 


COMPRESSED 
DISTRESSED 
DESIGNATED 
RESTRICTED 
INSTRUCTED 
PROHIBITED 
REENLISTED 
MECHANIZED 
CONTRABAND 
UNDERSTAND 


UNDERSTOOD 
COASTGUARD 
POSTOFFICE 
ACCORDANCE 
ALLEGIANCE 
APPEARANCE 
ACCEPTANCE 
RESISTANCE 
ASSISTANCE 
PRECEDENCE 


CONFIDENCE 
NEGLIGENCE 
EXPERIENCE 
PREFERENCE 
DIFFERENCE 
CONFERENCE 
CAMOUFLAGE 


DEPENDABLE 
EXPENDABLE 


IMPASSABLE 
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Table D-2 (2{. List of words used in military text arranged alphabetically 


· in reverse order according to word length (D)--Continued 


UNSUITABLE 
ACCEPTABLE 
IMPOSSIBLE 
ASPOSSIBLE 
RECEPTACLE 
MOTORCYCLE 
AUTOMOBILE 
DISCIPLINE 


QUARANTINE 
ENTERPRISE 


TRANSVERSE 
COORDINATE 


.ILLUMINATE 


ANTICIPATE 


ILLITERATE 


ILLUSTRATE 
COMPENSATE 
DISTRIBUTE 
SUBSTITUTE 
CONSTITUTE 
COMMUNIQUE 
TWENTY FIVE 
SUCCESSIVE 
IMPRESSIVE 
LOCOMOTIVE 
CENTRALIZE 
NATURALIZE 
DEMOBILIZE 
COMMANDING 
DEBOUCHING 
DETRUCKING 
ENTRUCKING 
ENCIRCLING 


SIGNALLING 


PATROLLING 
OVERCOMING 


DETRAINING 


CONCERNING 
INDICATING 


ANTEDATING 


IMPEDIMENT A 


TOPOGRAPHIC 
RECOMMENDED 


PREARRANGED 


ESTABLISHED 
OVERWHELMED 
DISAPPEARED 


TEN LEITER WORDS-Continued 


EVACUATING 
COLLECTING 
CONNECTING 
INFLICTING 


EXPEDITING 


RECRUITING 


ATTEMPTING 


SUPPORTING 


EXTINGUISH 
NINETEENTH 
EIGHTEENTH 
THIRTEENTH 


FOURTEENTH 
WILLATTACK 
ARTIFICIAL 
CREDENTIAL 
ADDITIONAL 
ACCIDENTAL 


REGIMENTAL 


INDIVIDUAL 


WITHDRAWAL 


AIRCONTROL 
SUCCESSFUL 
RESPECTFUL 
MEMORANDUM 
SUSPENSION 
DISPERSION 
CONCESSION 
CONFESSION· 
DEPRESSION 
IMPRESSION 
POSSESSION 
SUBMISSION 
COMMISSION 
PERMISSION 
DISCUSSION 
CONCLUSION 
DEDICATION 
INDICATION 


SURRENDERED 
ENCOUNTERED 


TRANSFERRED 


DISINFECTED 


REAPPOINTED 


INTERCEPTED 


INTERRUPTED 


ALLOCATION 
FOUNDATION 
RECREATION 


. IRRIGATION 
NAVIGATION 
REGULATION 
POPULATION 


ESTIMATION 


DOMINATION 
DETONATION 
OCCUPATION 
SEPARATION 
DECORATION 
LIMITATION 
SANITATION 
INVITATION 
EVACUATION 
EVALUATION 
EXCAVATION 
COLLECTION 
CONNECTION 
INSPECTION 
CORRECTION 
PROTECTION 
EXHIBITION 


EXPEDITION 


DEFINITION 
AMMUNITION 
OPPOSITION 
PROPORTION 
REVOLUTION 
MACHINEGUN 
BATTLESHIP 
CENSORSHIP 
ARMOREDCAR 
DIVEBOMBER 
COMMANDEER 
DISPATCHER 


MILLIMETER 


GONIOMETER 
HYDROMETER 
HYGROMETER 
AMBASSADOR 
INSTRUCTOR 
BALLISTICS 
STATISTICS 
CROSSROADS 
DESPATCHES 
;)ISPATCHES 
ASSEMBLIES 
FACILITIES 
ACTIVITIES 
CASUALTIES 
FRONT LINES 
SUBMARINES 
OBJECTIVES 
ENEMYTANKS 
SUSPICIONS 
COLLISIONS 
PROVISIONS 
EXPLOSIONS 
FORMATIONS 
OPERATIONS 
DIRECTIONS 
CONDITIONS 
TROOPSHIPS 
NEWSPAPERS 
KILOMETERS 
DESTROYERS 
TRANSPORTS 
SUSPICIOUS 
VICTORIOUS 
CIRCUITOUS 
CONTINUOUS 
PHOSPHORUS 
FLASHLIGHT 
COMMANDANT 


LIEUTENANT 


ELEVEN LEITER WORDS 


CONSTITUTED 


BA TILE FIELD 


PERFORMANCE 
MAINTENANCE 
COINCIDENCE 
SUBSISTENCE 
ACKNOWLEDGE 


CATASTROPHE 


IMFLAMMABLE 


RESPONSIBLE 


NAVALBATTLE 


TEMPERATURE 
MANUFACTURE 
SCHOOLHOUSE 
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CONTINGENT 
SUFFICIENT 
CONVENIENT 


EQUIVALENT 
ENGAGEMENT 
MANAGEMENT 


EXCITEMENT 
DETACHMENT 
ATTACHMENT 


EXPERIMENT 


ENROLLMENT 
ASSIGNMENT 


ATTAINMENT 
INTERNMENT 


GOVERNMENT 
ASSESSMENT 
COMMITMENT 


DEPARTMENT 


ENLISTMENT 
INSTRUMENT 
DEPLOYMENT 
EMPLOYMENT 
PERSISTENT 
AIRSUPPORT 
CONSPIRACY 
DEFICIENCY 
EFFICIENCY 
COMPLETELY 
APPARENTLY 
INCENDIARY 
COMMISSARY 


ELEMENTARY 


LABORATORY 
TRAJECTORY 
CAPABILITY 
AUDIBILITY 
VISIBILITY 
SIMILARITY 
INSECURITY 


CUSTOMHOUSE 
CERTIFICATE 
COMMUNICATE 
INVESTIGATE 
APPROPRIATE 
APPROXIMATE 


EXTERMINATE 
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Table D-2 ~· List of words used in military text arranged alphabetically 
in reverse order according to word length (D)--Continued 


ELEVEN LEITER WORDS-Continued 


DETERIORATE 


CONCENTRATE 
DEMONSTRATE 
NECESSITATE 
DISCONTINUE 
SEVENTYFIVE 
PROGRESSIVE 
RETROACTIVE 
DESCRIPTIVE 
SYNCHRONIZE 
APPROACHING 


INTERVENING 
ENGINEERING 
INTERFERING 
ALTERNATING 
INTERESTING 
WITHDRAWING 


DISTINGUISH 
SEVENTEENTH 
NAVALATTACK 
STRATEGICAL 
TRADITIONAL 
CONTINENTAL 
FIRECONTROL 


NATIONALISM 
SMOKESCREEN 
APPLICATION 
ASSOCIATION 
RETALIATION 
DEBARKATION 
EMBARKATION 
LEGISLATION 
CIRCULATION 
INFORMATION 
EXPLANATION 
DESIGNATION 
RESIGNATION 
EXAMINATION 
PREPARATION 
COOPERATION 
IMMIGRATION 
INSPIRATION 
CORPORATION 
PENETRATION 
ARBITRATION 
COMPUTATION 
OBSERVATION 
RESERVATION 


RESTRICTION 
DISTINCTION 
DESTRUCTION 
INSTRUCTION 
RECOGNITION 
REQUISITION 
COMPOSITION 
DISPOSITION 
COMPETITION 
DESCRIPTION 
CONSUMPTION 
INSTITUTION 


LIGHTBOMBER 
HEAVYBOMBER 
RANGEFINDER 
DYNAMOMETER 
THERMOMETER 
INTERPRETER 


RECONNOITER 
BLOCKBUSTER 
AERONAUTICS 


NA V ALFORCES 
ACCESSORIES 
HOSTILITIES 


ENEMYPLANES 
PHILIPPINES 
PARENTHESES 


HEA VYLOSSES 
COMMUNIQUES 
PARENTHESIS 
CREDENTIALS 
BATTLESHIPS 
ARMOREDCARS 
CORRECTNESS 


ENGAGEMENTS 


ASSIGNMENTS 
ASSESSMENTS 
INSTRUMENTS 
ESTIMATED AT 


SIGNIFICANT 


INDEPENDENT 
INTELLIGENT 


COEFFICIENT 
BOMBARDMENT 
REPLACEMENT 
EMPLACEMENT 
ENFORCEMENT 


ARRANGEMENT 


CONFINEMENT 


REQUIREMENT 
MEASUREMENT 


IMPROVEMENT 
CONCEALMENT 
ECHELONMENT 
DEVELOPMENT 


APPOINTMENT 


COMPARTMENT 


BELLIGERENT 


INCOMPETENT 


FINGERPRINT 


DISCREPANCY 
PHOTOGRAPHY 


IMMEDIATELY 


EXTENSIVELY 
EFFECTIVELY 
PRELIMINARY 
CONTROVERSY 
ELECTRICITY 
NATIONALITY 
SUITABILITY 
SUPERIORITY 


TWELVE LETTER WORDS 


TRANSPACIFIC 
HYDROGRAPHIC 


UNIDENTIFIED 


COMMISSIONED 
DISSEMINATED 
CONCENTRATED 
DEMONSTRATED 
DISORGANIZED 
SIGNIFICANCE 
INTELLIGENCE 
INTERFERENCE 
INCOMPETENCE 
CONSIDERABLE 


FIGHTERPLANE 
INTERMEDIATE 


DECENTRALIZE 
GENERALST AFF 
TRANSFERRING 
ENTERPRISING 
ILLUMINATING 
DISTRIBUTING 
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CONSTITUTING 
BREAKTHROUGH 
GEOGRAPHICAL 
CONFIDENTIAL 
PRESIDENTIAL 
RECREATIONAL 
AGRICULTURAL 


DEPARTMENTAL 


UNSUCCESSFUL 


GENERALALARM 
VETERINARIAN 


TRANSMISSION 
VERIFICATION 
CONFISCATION 
COMMENDATION 
CONCILIATION 
CANCELLATION 
PROCLAMATION 
CONFIRMATION 
CONFORMATION 
COORDINATION 


ILLUMINATION 
ANTICIPATION 
REGISTRATION 
ILLUSTRATION 
INAUGURATION 
COMPENSATION 
CONVERSATION 
RADIOST A TION 


CONTINUATION 
PRESERVATION 
MOBILIZATION 
ORGANIZATION 
INTERDICTION 
ROADJUNCTION 
INTRODUCTION 
CONSTRUCTION 
INTERVENTION 
INTERCEPTION 
CONSCRIPTION 
INTERRUPTION 
DISTRIBUTION 


SUBS1 ITUTION 
CONSTITUTION 
NORTHWESTERN 
SOUTHWESTERN 
MARKSMANSHIP 
MEDIUMBOMBER 
COMMISSIONER 
PSYCHROMETER 
SHARPSHOOTER 
DIFFICULTIES 
UNITEDST ATES 
PREPARATIONS 
OBSTRUCTIONS 
INSTRUCTIONS 
LIGHTBOMBERS 


HEA VYBOMBERS 
HEADQUARTERS 
PREPAREDNESS 
COMPLETENESS 
CARELESSNESS 
SEARCHLIGHTS 


~ANF"IOJ!NTIAL- 


REPLACEMENTS 
EMPLACEMENTS 
MEASUREMENTS 
ADVANTAGEOUS 
SIMULTANEOUS 
ANTIAIRCRAFT 
NONCOMBATANT 
CONY ALESCENT 
DISPLACEMENT 
COMMENCEMENT 
ANNOUNCEMENT 


ENTANGLEMENT 


DECIPHERMENT 
ENCIPHERMENT 
REENLISTMENT 
INEFFICIENCY 
SUCCESSFULLY 
RESPECTFULLY 
SATISFACTORY 
INTRODUCTORY 
IRREGULARITY 


CON Fl DENT lAt. 


Table D-2 Ge). List of words used in military text arranged alphabetically 
in reverse order according to word length (D)--Continued 


TRANSATLANTIC 


DISTINGUISHED 


DECENTRALIZED 
DISAPPEARANCE 
IMPRACTICABLE 
INDETERMINATE 
CORRESPONDING 
CONCENTRATING 
COUNTERATTACK 


1HIRTEEN LEITER WORDS 


CHRONOLOGICAL 


CONGRESSIONAL 


INTERNATIONAL 
SPECIFICATION 
QUALIFICATION 
COMMUNICATION 


ACCOMMODATION 


INVESTIGATION 


DISSEMINATION 


DETERMINATION 
EXTERMINATION 


CONSIDERATION 


CONCENTRATION 


DEMONSTRATION 


QUARTERMASTER 


CIRCUMSTANCES 
DISCREPANCIES 
PRELIMINARIES 


FIGHTERPLANES 


INSTALLATIONS 


MEDIUMBOMBERS 


MISCELLANEOUS 
INSTANTANEOUS 


REENFORCEMENT 
REINFORCEMENT 
REIMBURSEMENT 


FOURTEEN LEITER WORDS 


CHARACTERISTIC 


RECONNAISSANCE 
DISCONTINUANCE 


RECONNOITERING 


METEOROLOGICAL 


CIRCUMSTANTIAL 


CLASSIFICATION 


IDENTIFICATION 
RECOMMENDATION 


ADMINISTRATION 
INTERPRETATION 


TRANSPORTATION 


CENTRALIZATION 
NATURALIZATION 
DEMOBILIZATION 


. CORRESPONDENCE 


ADMINISTRATIVE 
REPRESENTATIVE 


DISTINGUISHING 


.CONF"ID&:NTIAL 


REINSTATEMENT 


ESTABLISHMENT 


ENTERTAINMENT 
REAPPOINTMENT 


APPROXIMATELY 


EXTRAORDINARY 


REVOLUTIONARY 


DEPENDABILITY 


REORGANIZATION 


RECONSTRUCTION 
IRREGULARITIES 
INVESTIGATIONS 
SATISFACTORILY 
RESPONSIBILITY 
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A CC 


A CC 
0 cc 
A DD 


SU DD 
LA DD 
BE DD 
FL EE 


S EE 
THR EE 


PROC EE 


SP EE 


CR EE 
W EE 
F EE 


ST EE 
WH EE 
B EE 
. FOURT EE 


HASB EE 


QU EE 


SCR EE 


S EE 


SIXT EE 
R EE 
K EE 


SW EE 
F EE 
FL EE 
M EE 


JUMPO FF 


0 FF 


STA FF 


0 
FF 


SU FF 
TRA FF 


0 
FF 


0 FF 
E FF 


FO GG 
A LL 


CA LL 


CE LL 
DRI LL 


ENRO LL 
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Table D-3 p). List of words used in military text arranged alphabetically 
according to word pattern (U) 


PATTERNAA 


EPT 
FA LL 
MA NN 


ORDING 
FE LL 
ANN 


UPY 
FU LL 
CA NN 


ID LL 
T 00 


EN 
I LL 
w 00 


ER 
INSTA LL 
PR 00 


lNG 
PAYRO LL 
B 00 


REFI LL 
c 00 
SHE LL 
H 00 
SMA LL 
L 00 


D 
SPE LL 
T 00 


D 
WE LL 
SCH 00 


K 
WI LL 
T 00 


K 
VI LL 
AGE 
PLAT 00 


L 
CO LL 
APSED 
s 00 


L 
DO LL 
AR 
TR 00 


L 
OSCI LL 
ATE 
c 00 


N 
KI LL 
ED 
B 00 


N 
BI LL 
ET 
STO PP 


N 
BU LL 
ETIN 
HA PP 


N 
VA LL 
EY 
CLI PP 


N 
A LL 
lED 
MA PP 


N 
A LL 
IES 
A PP 


N 
FA LL 
lNG 
SU PP 
NLIST 
PATRO LL 
lNG 
A PP 


p 
SHE LL 
lNG 
A PP 
PING 
A LL ow 
SU PP 


T 
A LL 
y 
su pp 
T 
RA 'LL 
y 
A PP 


T 
CO MM A 
TE RR 


CO MM AND 
CU RR 


CO MM 
ANDER 
A RR 


SU MM 
ARY 
HU RR 
END 
CO MM 
END 
DE RR 
ER 
CO MM 
ENT 
GA RR 


IC 
HA MM ER 
A RR 


ICE 
SU MM 
ER 
CA RR 


ICER 
CO MM IT 
FE RR 


ORT 
SU MM IT 
ACRO SS 


y 
SU MM 
ON 
COMPA SS 
CO MM 
UTE 
CONGRE SS 
TO NN 
AGE 
CRO SS 
CHA NN 
EL 
DARKNE SS 


BA NN 
ER 
DRE SS 
GU NN 
ER 
LE SS 
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ER 
EX 


OT 


DS 


F 
K 
K 
K 
K 
K 
L 
L 
N 
N 


PS 


RDINATE 
TH 
ED 
EN 
ER 
ING 


LY 
LY 
OINT 


OINT ED 


ORT 
ORTING 
ROVE 


AIN 
ENT 


EST 


I CANE 
ICK 
ISON 


IVE 
y 
y 
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Table D-3 ~ 
List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 
PATTERN AA- Continued 


LO SS 
A SS 
IGNED 
BA TT 
EN 
MA SS 
CRO SS 
lNG 
WRI TT 
EN 
ME SS 
DRE SS 
lNG 
BI TT 
ER 
PA SS 
ME SS 
lNG 
LITI 
ER 
PRE SS 
PA SS 
IVE 
BA TT 
ERY 


UNLE SS 
LE SS 
ON 
SPO TT 
lNG 
WITNE SS 
I SS 
UE 
BA TT 
LE 
PA SS 
ED 
A SS 
URE 
BA TT 
LESHIP 


A SS 
EMBLY 
EMBA SS 
y 
MU ZZ 
LE 
A SS 
ET 
OMI TT 
ED 
NO ZZ 
LE 
PO SS 
IBLE 
SUBMI TT 
ED 


MUSCELLANEOUSPATTERNS 


AABA 
AGR 
EEME 
NT 
AABCB 
su 
FFICI 
ENT 
AABA 
K EEPE 
R 
AABCB 
A LLEGE 
AABA 
CH 
EESE 
AABCB 
co 
LLEGE 
AABA 
BR 
EEZE 
AABCB 
BI 
LLETE D 
AABA 
MA 
NNIN 
G 
AABCB 
A MMETE 
R 
AABA 
PLA 
NNIN 
G 
AABCB 
w OODED 


AABA 
RU 
NNIN 
G 
AABCB 
TE 
RRIFI c 
AABA 
L OOKO Uf 
AABCB 
BA 
TTERE D 
AABA 
E RROR 
AABCBDEB 
DI 
FFERENCE 


AABA 
MI 
RROR 
AABCC 
A CCESS 


AABA 
TE 
RROR 
AABCC 
A CCESS ORY 


AABA 
GLA 
SSES 
.AABCC 
co 
MMISS ARY 
AABA 
LO 
SSES 
AABCCB 
WI 
LLATTA 
CK 


AABA 
PA 
SSES 
AABCCDD 
co 
MMITTEE 
AABA 
CHA 
SSIS 
AABCCDEFBC 
A CCESSORIES 


AABA 
A SSIS T 
AABCDA 
I LLEGAL 


AABAACB 
A SSESSME NT 
AABCDA 
A TTEMPT 


AABAACBDEA 
A SSESSMENTS 
AABCDAB 
A TTEMPTE D 
AABAB 
PROC 
EEDED 
AABCDB 
0 
FFENSE 


AABB 
co 
FFEE 
AABCDB 
CHA 
LLENGE 
AABB 
BA 
LLOO N 
AABCDB 
BA 
LLISTI C 
AABBAACAC 
B EENNEFDED 
AABCDB 
A RRESTE 
D 


AABBCBC 
su CCEEDED 
AABCDB 
PA 
SSENGE 
R 


AABCA 
B EETLE 
AABCDB 
BA 
TTERIE 
s 


AABCA 
A NNOUN 
CE 
AABCDBA 
su 
RRENDER 


AABCA 
F OOTHO 
LE 
AABCDBABD 
su 
RRENDERED 


AABCA 
CA 
RRIER 
AABCDBC 
co 
MMANDAN T 


AABCA 
A SSETS 
AABCDBD 
0 
FFENDED 


AABCA 
I SSUES 
AABCDBEC 
BA 
LLISTICS 
AABCADEC 
co 
MMITMENT 
AABCDC 
E FFICAC 
y 


AABCADEC 
A TIENTION 
AABCDD 
A DDRESS 
AABCADEFEA 
A NNOUNCEMEN T 
AABCDD 
I LLNESS 
AABCB 
SCR 
EENIN 
G 
AABCDDCA 
A DDRESSED 
AABCB 
su 
FFERE 
D 
AABCDDCD 
A DDRESSES 
AABCB 
DI FFERE 
NT 
AABCDEB 
co 
MMUNIQU 
E 


AABCB 
0 
FFICI 
AL 
AABCDEB 
TR 
OOPS HIP 
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Table D-3 C¢). List of words used in military text arranged 
alphabetically according to word pattern (D)--Continued 


NDSCELLANEOUSPATTERNS-Continued 


AABCDEB 
A SSEMBLE 
ABA 
GROUN DED 


AABCDEBC 
TR OOPSHIPS 
ABA 
GUAR DED 


AABCDEC 
CO MMANDIN 
G 
ABA 
INVA DED 


AABCDECB 
BA TTLEFIEL 
D 
ABA 
LAN DED 


AABCDED 
CO MMANDED 
ABA 
RAJ DED 


AABCDEDFC 
A MMUNITION 
ABA 
WOUN DED 


AABCDEE 
CO MMANDEE 
R 
ABA 
DID 


AABCDEFA 
R EENLISTE 
D 
ABA 
IC 
EBE RG 


AABCDEFA 
I RREGULAR 
ABA 
PR ECE DING 


AABCDEFB 
0 
FFENSIVE 
ABA 
R ECE IPT 


AABCDEFBA 
A SSEMBLIES 
ABA 
CR EDE NTIAL 


AABCDEFC 
A LLOTMENT 
ABA 
F EDE RAL 


AABCDEFC 
C OOPERATE 
ABA 
D EFE AT 


AABCDEFD 
I LLUSTRAT 
E 
ABA 
D EFE CT 
AABCDEFD 
A SSIGNMEN 
T 
ABA 
D EFE R 


AABCDEFDGA 
A SSIGNMENTS 
ABA 
SI EGE 


AABCDEFGA 
C OOPERA TIO N 
ABA 
R EJE CT 
AABCDEFGABF 
R EENLISTMENT 
ABA 
S ELE CT 
AABCDEFGD 
BA TTLESHIPS 
ABA 
T ELE GRAM 


AABCDEFGDAE 
C OORDINATION 
ABA 
ELE VATION 
AABCDEFGDE 
A PPOINTMENT 
ABA 
SCH EME 
ABA 
AGA 
IN 
ABA 
R EME DY 


ABA 
AGA 
INST 
ABA 
DISPLAC EME NT 
ABA 
C ALA 
MITY 
ABA 
PLAC 
EME NT 


ABA 
ALA 
RM 
ABA 
ENE MY 


ABA 
S ALA 
RY 
ABA 
G ENE RAL 
ABA 
D AMA 
GE 
ABA 
R EPE L 
ABA 
M ANA 
GE 
ABA 
H ERE 
ABA 
C ANA 
L 
ABA 
SPH ERE 
ABA 
ANA 
LYZE 
ABA 
TH ERE 
ABA 
J APA 
N 
ABA 
W ERE 
ABA 
P ARA 
CHUTE 
ABA 
WH ERE 
ABA 
P ARA 
DE 
ABA 
CONQU ERE D 
ABA 
SEP ARA 
TION 
ABA 
COY ERE D 
ABA 
F ATA 
L 
ABA 
TH ESE 


ABA 
N AVA 
L 
ABA 
PR ESE NT 
ABA 
N AVA 
LFORCES 
ABA 
D ESE RT 
ABA 
C AVA 
LRY 
ABA 
COMPL ETE 
ABA 
EXC AVA 
TION 
ABA 
KILOM ETE R 
ABA 
AWA 
IT 
ABA 
M ETE R 
ABA 
AWA 
RD 
ABA 
P ETE R 
ABA 
AWA 
y 
ABA 
D EVE LOP 


ABA 
PRO BAB 
LE 
ABA 
S EVEN 


ABA 
PRO BAB 
LY 
ABA 
S EVE NTH 
ABA 
Bl CYC 
LE 
ABA 
S EVE NTY 


ABA 
CYC 
LONE 
ABA 
S EVE RAL 
ABA 
BLOCKA DED 
ABA 
EVERY 
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Table D-3 ~. List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


MISCELLANEOUS PATTERNS-Continued 


ABA 
EYE 
ABA 
M 
OTO RIZED 
ABA 
FIF. TH 
ABA 
PR 
OVO ST 


ABA 
FIF TY 
ABA 
PIP E 
ABA 
EIG 
HTH 
ABA 
POP ULATED 


ABA 
L 
IAI 
SON 
ABA 
LIB 
RAR Y 
ABA 
PROH 
IBI 
T 
ABA 
AI 
RDR OME 


ABA 
SERV 
ICI 
NG 
ABA 
CA 
RTR IDGE 
ABA 
RA 
IDI 
NG 
ABA 
D 
RYR UN 
ABA 
R 
IDI 
NG 
ABA 
DI 
SAS TER 
ABA 
R 
IGI D 
ABA 
CA 
SES 


ABA 
F 
ILl 
NG 
ABA 
RE 
SIS T 
ABA 
M 
ILl 
TARY 
ABA 
SUS PEND 


ABA 
MOB 
ILl 
ZE 
ABA 
SYS TEM 
ABA 
s 
IMI 
LAR 
ABA 
s 
TAT ION 


ABA 
L 
IMI T 
ABA 
DIC 
TAT OR 


ABA 
PROX 
IMI TY 
ABA 
TIT LE 
ABA 
F 
INI 
SH 
ABA 
AL 
TIT UDE 
ABA 
F 
IRI 
NG 
ABA 
LA 
TIT UDE 
ABA 
RET 
IRI 
NG 
ABA 
TOT AL 
ABA 
w 
IRI 
NG 
ABA 
TOT ALING 
ABA 
v 
lSI 
BLE 
ABA 
A 
UGU ST 


ABA 
D 
lSI 
NFECT 
ABA 
USU AL 
ABA 
ADV 
lSI 
NG 
ABA 
F 
UTURE 


ABA 
DEC 
lSI 
ON 
ABA 
SUR 
VIV ED 
ABA 
v 
lSI 
T 
ABAA 
HAY 
EBEE 
N 
ABA 
v 
lSI 
TOR 
ABAA 
SESSION 


ABA 
POL 
ITI cs 
ABAACC 
TATTOO 


ABA 
CR 
ITI 
QUE 
ABAB 
DETRA 
ININ G 
ABA 
POS 
ITI ·vE 
ABAB 
L 
ININ G 
ABA 
MEM 
ORIAL 
ABAB 
M 
ININ G 
ABA 
NAN 
ABAB 
OBTA 
ININ G 
ABA 
DOMI 
NANCE 
ABAB 
RA 
ININ G 
ABA 
ORD 
NANCE 
ABAB 
REMA 
ININ G 
ABA 
DOMI 
NANT 
ABAB 
TRA 
ININ G 
ABA 
NIN E 
ABAB 
CR 
ISIS 


ABA 
NIN ETY 
ABAB 
WI 
THTH 
E 
ABA 
MOR 
NIN G 
ABAB 
PAR 
TITI 
ON 


ABA 
NIN TH 
ABACA 
c 
AN ADA 
ABA 
OBOE 
ABACA 
p 
AN AMA 
ABA 
c 
OLO N 
ABACA 
PR 
ECEDE 


ABA 
SEMIC 
OLO N 
ABACA 
ELEME NT 
ABA 
c 
OLO RS 
ABACA 
ELEMENTARY 
ABA 
AUT 
OMO BILE 
ABACA 
ELEVE N 
ABA 
PR 
OMOTE 
ABACA 
c 
EMETE RY 
ABA 
H 
ONOR 
ABACA 
s 
EVERE 
ABA 
VIG 
ORO US 
ABACA 
AUD 
IBILI 
TY 
ABA 
M 
OTO R 
ABACA 
EXH 
IBITI 
ON 
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Table D-3 ~List of words used in military text arranged alphabetically 
according to word pattern (U)-- Continued 


~SCELLANEOUSPATTERNS-Continued 


ABACA 
v 
ICINI 
TY 
ABACDA 
R 
ECEIVE 
ABACA 
M 
ILITI 
A 
ABACDA 
D 
ECEMBE 
R 


ABACA 
FAC 
I UTI 
ES 
ABA CDA 
D 
EFENSE 
ABACA 
D 
I MINI 
SH 
ABACDA 
R 
EJECTE 
D 


ABACA 
L 
IMITI 
NG 
ABACDA 
R 
ELEASE 
ABACA 
INITI 
AL 
ABACDA 
s 
ELECTE 
D 


ABACA 
DEF 
INITI 
ON 
ABACEA 
R 
EMEDIE s 


ABACA 
D 
IRIGI 
BLE 
ABACDA 
EMERGE NCY 
ABACA 
SEM 
IRIGI 
D 
ABACDA 
EN EM IE s 


ABACA 
REQU 
ISITI 
ON 
ABACDA 
R 
EPEATE 
D 


ABACA 
c 
NILI 
AN 
ABACDA 
R 
EVENUE 
ABACA 
D 
IVISI 
ON 
ABACDA 
u 
NKNOWN 


ABACA 
L 
OCOMO 
TIVE 
ABACDA 
PR 
OMOTIO 
N 


ABACA 
M 
ONOPO 
LY 
ABACDAAC 
s 
EVENTEEN 


ABACA 
PR 
OTOCO 
L 
ABACDAACD 
s 
EVENTEENT H 


ABACA 
CONS 
TITUT 
E 
ABACDAC 
D 
ESERTER 


ABACA 
UNUSU 
AL 
ABACDAD 
D 
EFENSES 


ABA CAD A 
v 
ISIBILI 
TY 
ABACDAED 
AVAILABL 
E 


ABACADB 
DEF 
INITION 
ABACDAEEC 
N 
AVALBATTL E 


ABACADBA 
PR 
ECEDENCE 
ABACDB 
F 
AT ALIT 
y 


ABACADC 
INITIAT 
E 
ABACDB 
A 
NONYMO 
us 


ABACADD 
COMPL 
ETENESS 
ABACDB 
c 
OLONEL 
ABACADDA 
N 
AVALATTA CK 
ABACDBA 
TH 
ERE FORE 
ABACADEC 
D 
NISIONS 
ABA CDC 
R 
ECEIVI 
NG 


ABACB 
v 
ACANC 
y 
ABA CDC 
EVENIN 
G 


ABACB 
COMB 
AT ANT 
ABACDC 
DYNA 
MOMETE R 


ABACB 
c 
ATAST 
ROPHE 
ABACDCA 
L 
IMITATI 
ON 
ABACB 
D 
ETECT 
OR 
ABACDCCA 
NINETEEN 


ABACB 
v 
IS ITS 
ABACDCCAD 
NINETEENT H 


ABACB 
MEMBE 
R 
ABACDCEA 
s 
TATEMENT 


ABACBDEC 
D 
ETENTION 
ABACDCECFGHIE 
M 
ETEOROLOGICAL 
ABACBDEC 
R 
ETENTION 
ABACDD 
FIFTEE 
N 
ABACBDEFGFAG 
NONCOMBATANT 
ABACDD 
FO 
RTRESS 
ABACC 
R 
EBELL 
ION 
ABACDDEC 
FIFTEENT 
H 


ABACC 
N 
ECESS 
ARY 
ABACDEA 
ELEVATE 


ABACC 
N 
ECESS 
ITY 
ABACDEA 
D 
EVELOPE 
ABACC 
CAR 
ELESS 
ABACDEA 
VER 
IFICATI 
ON 
ABACC 
WIR 
ELESS 
ABACDEA 
s 
IMILARI 
TY 
ABACCA 
p 
ARALLA X 
ABACDEAD 
SUSPENSE 
ABACCA 
R 
EPELLE 
D 
ABACDEAFGE 
SUSPENSION 
ABACCA 
T 
OMORRO 
w 
ABACDEB 
EXPL 
ANATION 


ABACCDACC 
CAR 
ELESSNESS 
ABACDEB 
T 
OPOGRAP 
HIC 
ABACCDC 
p 
ARALLEL 
ABACDEBFA 
R 
ECEPTACLE 
ABACCDEFEA 
N 
ECESSITATE 
ABACDEC 
ABANDON 


ABACDA 
ALASKA 
ABACDEC 
D 
AMAGING 


ABACDA 
ARABIA 
ABACDEC 
QU 
ARANTIN 
E 


ABACDA 
N 
AVALBA SE 
ABACDECA 
p 
ENETRATE 
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Table D-3 ~ 
List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 
MISCELLANEOUS PATTERNS-Continued 


ABACDECFBA 
D 
ETERIORATE 
ABBA 
COMP 
ELLE 
D 


ABACDECFGB 
p 
ENETRATION 
ABBA 
SH 
ELLE 
D 
ABA CD ED 
c 
APABILI 
TY 
ABBA 
CONF 
ERRE D 


ABACDED 
M 
OTORCYC 
LE 
ABBA 
COMPR 
ESSE 
D 


ABACDED 
SUSPICI 
ON 
ABBA 
IMPR 
ESSE 
D 


ABACDEDEDC 
G 
ENERALALAR M 
ABBA 
PR 
ESSE 
D 


ABACDEDFBA 
SUSPICIOUS 
ABBA 
v 
ESSE 
L 


ABACDEDFGA 
SUSPICIONS 
ABBA 
CIGAR 
ETTE 


ABACDEFA 
D 
EFECTIVE 
ABBA 
B 
ETTE 
R 


ABACDEFA 
D 
EFENSIVE 
ABBA 
L 
ETTE 
R 


ABACDEFA 
T 
ELEPHONE 
ABBA 
D 
IFFI 
CULT 
ABACDEFA 
D 
ETERMINE 
ABBA 
w 
ILLI 
AM 


ABACDEFA 
D 
EVELOPME NT 
ABBA 
F 
ILLI 
NG 


ABACDEFA 
EXERCISE 
ABBA 
K 
ILLI 
NG 


ABACDEFAF 
EXERCISES 
ABBA 
REF 
ILLI 
NG 


ABACDEFB 
DEDICATE 
ABBA 
sw 
IMMI 
NG 


ABACDEFB 
ENEMYTAN KS 
ABBA 
SH 
IPPI 
NG 


ABACDEFC 
DEDICATI 
ON 
ABBA 
M 
ISSI 
NG 


ABACDEFCDFE 
v 
ETERINARIAN 
ABBA 
ADM 
ISSI 
ON 
ABACDEFCFD 
ELECTRIC IT 
y 
ABBA 
M 
ISSI 
ON 
ABACDEFD 
SUSPECTE 
D 
ABBA 
PERM 
ISSI 
ON 
ABACDEFDF 
SUSPENDED 
ABBA 
F 
ITTI 
NG 


ABACDEFE 
ANALYSIS 
ABBA 
AFTER 
NOON 
ABACDEFGA 
EXECUTIVE 
ABBA 
NOON 
ABACDEFGB 
POPULATIO 
N 
ABBA 
F 
OLLO w 


ABACDEFGBA 
ENEMYPLANE S 
ABBA 
c 
OMMO N 


ABACDEFGBA 
s 
EVENTYFIVE 
ABBA 
OPPO 
SE 
ABACDEFGBEHF 
D 
ETERMINA TION 
ABBA 
OPPO 
SITE 
ABACDEFGDHH 
G 
ENERALST AFF 
ABBA 
B 
OTTO M 


ABACDEFGE 
MEMORANDA 
ABBAB 
B 
AGGAG 
E 


ABACDEFGHA 
MEMORANDUM 
ABBAB 
WITN 
ESSES 
ABACDEFGHIA 
D 
ECENTRALIZE 
ABBACA 
APPARA 
TUS 


ABBA 
AFFA 
IR 
ABBACA 
L 
ETTERE 
D 
ABBA 
APPA 
RENT 
ABBACB 
v 
ESSELS 


ABBA 
APPA 
RENTLY 
ABBA CDA 
M 
ESSENGE 
R 
ABBA 
B 
ARRA CKS 
ABBA CDA 
EFFECTE 
D 
ABBA 
B 
ARRA GE 
ABBACDB 
M 
ISSIONS 


ABBA 
ARRA NGE 
ABBACDEA 
IRRIGATI 
ON 


ABBA 
ASSA 
ULT 
ABBACDEDA 
OPPOSITIO 
N 
ABBA 
p 
ASSA 
GE 
ABBACDEFA 
EFFECTIVE 


ABBA 
IMP 
ASSA 
BLE 
ABBACDEFA 
D 
IFFICULTI 
ES 


ABBA 
ATTA 
CH 
ABBACDEFA 
IMMIGRATI ON 


ABBA 
ATTA 
CK 
ABBACDEFCD 
ILLITERATE 
ABBA 
ATTA 
IN 
ABBACDEFDB 
ATTAINMENT 
ABBA 
B 
ATTA 
LION 
ABBACDEFEC 
ARRANGEMEN T 
ABBA 
IN 
DEED 
ABBACDEFGB 
ATTACHMENT 


ABBA 
EFFE 
CT 
ABBCA 
ANNUA 
L 
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Table D-3 (~ List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


~SCELLANEOUSPATTERNS-Continued 


ABBCA 
APPEA 
R 
ABBCDEAFBGBC 
REENFORCEMEN T 


ABBCA 
DIS APPEA 
R 
ABBCDEAFD 
APPLICATI 
ON 
ABBCA 
C ARRIA 
GE 
ABBCDEAFEC 
AS SOCIA TI 0 N 


ABBCA 
S ETTLE 
ABBCDEAFGC 
ACCEPTABLE 
ABBCA 
ISSUI 
NG 
ABBCDEAFGC 
ALLEGIANCE 


ABBCA 
FOUR TEENT 
H 
ABBCDEAFGHF 
C ORRESPONDIN 
G 


ABBCA 
SIX TEENT 
H 
ABBCDEFGA 
ACCIDENT A 
L 


ABBCA 
CHA UFFEU 
R 
ABBCDEFGA 
APPROXIMA 
TE 


ABBCA 
S URROU 
ND 
ABBCDEFGA 
OCCUPATIO 
N 


ABBCADAEFC 
APPEARANCE 
ABBCDEFGBA 
IRREGULAR! 
TY 
ABBCADAEFC 
DIS APPEARANCE 
ABBCDEFGBAHAC 
IRREGULARITIE S 
ABBCADC 
APPEARE 
D 
ABBCDEFGEA 
ILLUSTRATI 
ON 
ABBCBBDA 
P OSSESSIO 
N 
ABBCDEFGHAD 
C OMMENDA TION 
ABBCBDA 
ASSIST A 
NCE 
ABCA 
P ACKA GE 
ABBCBDAED 
ASSISTANT 
ABCA 
EV ACUA TING 


ABBCCDAB 
ASSOONAS 
ABCA 
EV ACUA TION 
ABBCDA 
ALLOW A 
NCE 
ABCA 
R ADIA 
L 


ABBCDA 
APPRO A 
CH 
ABCA 
R ADIA 
TE 


ABBCDA 
ARRIVA 
L 
ABCA 
ADJA 
CENT 
ABBCDA 
ASSURA 
NCE 
ABCA 
GR ADUA L 


ABBCDA 
M ESSAGE 
ABCA 
ADVA NCE 
ABBCDA 
ILLUMI 
NATE 
ABCA 
DI AGRA M 


ABBCDAB 
M ESSAGES 
ABCA 
EV ALUA TION 
ABBCDAB 
C ORRIDOR 
ABCA 
ALWA YS 
ABBCDAEA 
B ELLIGERE 
NT 
ABCA 
C AMPA IGN 


ABBCDAEFC 
ALLOCATION 
ABCA 
M ANDA TE 


ABBCDAEFC 
IMMEDIATE 
ABCA. 
M ANUA L 
ABBCDAEFGAE 
ILLUMINATIN G 
ABCA 
1 ANUA RY 


ABBCDAEFGAHE 
ILLUMINATION 
ABCA 
C ANVA S 


ABBCDAEFGAHE 
D ISSEMINATION 
ABCA 
CH APLA 
IN 


ABBCDBCEA 
APPROPRIA 
TE 
ABCA 
C APTA 
IN 


ABBCDCA 
EFFICIE 
NT 
ABCA 
AREA 


ABBCDCA 
C OLLISIO N 
ABCA 
DEB ARKA TION 
ABBCDCAED 
EFFICIENC 
y 
ABCA 
EMB ARKA TION 


ABBCDCAED 
C OLLISIONS 
ABCA 
ASIA 
ABBCDCEFA 
ADDITIONA L 
ABCA 
CO ASTA 
L 


ABBCDDCA 
C OMMISSIO 
N 
ABCA 
C ASUA L 


ABBCDDCA 
C OMMISSIO 
NER 
ABCA 
C ASUA 
LTY 
ABBCDDCEAFGC 
ACCOMMODA TIO N 
ABCA 
A VIA 
TOR 
ABBCDEA 
ACCOMPA 
NY 
ABCA 
BARB 
ED 


ABBCDEA 
APPROVA 
L 
ABCA 
BOMB 
ABBCDEA 
ASSOCI A 
TE 
ABCA 
BOMB 
ARD 


ABBCDEA 
SH ELLFIRE 
ABCA 
BOMB 
ER 


ABBCDEA 
T ERRIBLE 
ABCA 
LIGHT BOMB 
ER 
ABBCDEAFB 
ACCORDANC 
E 
ABCA 
BRIB 
E 
ABBCDEAFB 
REENFORCE 
ABCA 
BULB 
ABBCDEAFBC 
ACCEPTANCE 
ABCA 
CANC 
EL 
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Table D-3~ List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


MISCELLANEOUS PATTERNS- Continued 


ABCA 
CHEC 
K 
ABCA 
GEOG 
RAPHIC 
ABCA 
CIRC . LE 
ABCA 
FORGING 
ABCA 
CIRC 
ULATE 
ABCA 
WHICH 
ABCA 
CONC 
EAL 
ABCA 
HIGH 


ABCA 
CONC 
LUDE 
ABCA 
HIGH 
ER 


ABCA 
HUNDRED 
ABCA 
HIGH 
EST 


ABCA 
L EADE 
R 
ABCA 
V ICTI 
M 


ABCA 
EAGE 
R 
ABCA 
M IDNI 
GHT 


ABCA 
M EAGE 
R 
ABCA 
DR IFTI 
NG 


ABCA 
S EAME 
N 
ABCA 
L IFTI 
NG 


ABCA 
ST EAME 
R 
ABCA 
S IGNI 
FY 
ABCA 
N EARE 
ST 
ABCA 
BU ILDI 
NG 


ABCA 
CEASE 
ABCA 
INDI 
CATE 
ABCA 
GREASE 
ABCA 
INDI 
RECT 
ABCA 
INCR EASE 
D 
ABCA 
DESCR IPTI 
ON 
ABCA 
LEAVE 
ABCA 
L IQUI 
D 


ABCA 
ECHE 
LON 
ABCA 
A IRFI 
ELD 


ABCA 
WR ECKE 
D 
ABCA 
REPR 
ISAL 


ABCA 
INF ECTE 
D 
ABCA 
M ISFI 
RE 


ABCA 
EDGE 
ABCA 
F ISHI 
NG 


ABCA 
S EIZE 
ABCA 
W ITHI 
N 


ABCA 
R ELIE 
F 
ABCA 
FUE LOlL 
ABCA 
H ELPE 
R 
ABCA 
MAIM 


ABCA 
TWELVE 
ABCA 
LANDIN 
G 


ABCA 
NOV EMBE 
R 
ABCA 
I NFAN TRY 
ABCA 
ABSENCE 
ABCA 
CO NFIN 
E 


ABCA 
UC ENSE 
ABCA 
UNION 
ABCA 
C ENTE· R 
ABCA 
SUNKEN 
ABCA 
ENTE 
R 
ABCA 
FLA NKIN 
G 


ABCA 
ENVE 
LOP 
ABCA 
I NLAN 
D 


ABCA 
R EQUE 
ST 
ABCA 
I NTEN 
D 


ABCA 
FI ERCE 
ABCA 
CO NTIN 
UAL 
ABCA 
SERGE 
ANT 
ABCA 
CO NTIN 
UE 


ABCA 
MAT ERIE 
L 
ABCA 
I NVEN 
T 


ABCA 
REVERSE 
ABCA 
OCTO 
BER 


ABCA 
OBSERVE 
ABCA 
D OCTO 
R 


ABCA 
R ESPE 
CT 
ABCA 
F OGHO 
RN 


ABCA 
W ESTE 
RLY 
ABCA 
P OISO 
N 


ABCA 
W ESTE 
RN 
ABCA 
COMPO SED 
ABCA 
ETHE 
R 
ABCA 
C ONVO Y 
ABCA 
MAN EUVE 
R 
ABCA 
EN ORMO US 
ABCA 
R EVIE 
w 
ABCA 
EXPL OSIO 
N 


ABCA 
EXCE 
PT 
ABCA 
PUMP 


ABCA 
EXPE 
CT 
ABCA 
PURP 
OSE 
ABCA 
EXPE 
ND 
ABCA 
HARBOR 
ABCA 
EXTE 
ND 
ABCA 
AI RBOR 
NE 


ABCA 
GAUG E 
ABCA 
MURDER 
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Table D-3 ~ 
List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 


ABCA 
ABCA 
ABCA 
ABCA 
ABCAA 
ABCAA 
ABCAA 
ABCAA 
ABCAA 
ABCAAB 
ABCAAB 
ABCAACDEB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 


~SCELLANEOUSPATTERNS-Continued 


0 RDER 


0 RDER S 


REAR 


RECR 
UIT 


COU RIER 
P RIOR 
SUPE RIOR 


A RMOR 


ARMOR Y 


P ROGR AM 
MORTAR 


QUA RTER 


QUA RTER 
S 


FEB RUAR Y 
FO RWAR D 


CEN SORS 
HIP 


SUNS 
ET 
IMPOR TANT 


START 
PRO TECT 


TENT 
TENT 
H 


PRO TEST 


TEXT 
THAT 


S TRAT 
EGIC 
S TRAT 
EGY 


D UGOU T 


UNSU 
ITABLE 
P URSU 
E 
P URSU 
IT 


0 UTGU ARD 
D ECREE 


D EGREE 
B ETWEE N 
DI SCUSS 


A SPOSS IBLE 


PONTOON 


THATTH 
E 
P REARRANGE 
D 
W ARFAR 
E 


S ECREC 
Y 
OBS ERVER 
W HETHE 
R 
B INDIN 
G 
F INDIN 
G 


S INKIN 
G 


ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABC ABA 


ABCABB 
ABCABB 
ABC ABC 
ABC ABC A 


ABCABDA 
ABCABDB 
ABCABDBEFGFHIB 
ABCABDBEFGFHIED 
ABCABDC 
ABCABDED 
ABCABDEFA 
ABCABDEFGHD 
ABCAC 
ABCAC 
ABCAC 
ABCAC 
ABCAC 
ABCACA 
ABCACB 
ABCACBDEC 
ABCACDEFD 
ABC ADA 


ABC ADA 


ABC ADA 


ABC ADA 


ABC ADA 


ABCADAB 
ABCADAC 
ABCADAC 
ABCADAEC 
ABCADAEFB 
ABCADAEFC 
ABCADAEFCE 
ABCADAEFGHF 
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PA INTIN G 
PR INTIN G 
I NTENT 


PONTON 
C ORPOR 
RECRE 


P RIORI 


SUPE RIORI 
DI SEASE 


AL 
ATION 


TY 
TY 


PRO TECTE 
D 


PRO TESTE 
D 


0 UTPUT 
INT ERFERE 
D ISMISS 


D ISMISS 
AL 
THATHA VE 
ENTENTE 


S ENTENCE 
REPRESE NT 


REPRESENTATIVE 
REPRESENTATIONS 


RETREAT 
M ANGANESE 
C ORPORATIO 
N 


RECREATIONAL 


ARMAM 
ENT 
N EARER 


PROPO 
SE 


P RAIRI 
E 


PRO TESTS 


D IETITI 
AN 


0 RDERED 


PROPORTIO N 


PROPOSALS 


ALMANA C 


R ELIEVE 


C ENTERE 
D 
B ESIEGE 
D 
R EVIEWE 
D 


CO NTINENT 
AL 


S EALEVEL 
INDIVID 
IGNITION 
TENTATIVE 


UAL 


S IGNIFICAN 
T 


S IGNIFICANC E 


SUBSISTENCE 
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Table D-3 ~ 
List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


MISCELLANEOUS PATTERNS- Continued 


ABCADB 
ATLANT 
IC 
ABCADEAB 
co 
NTINGENT 


ABCADB 
BRIBER 
y 
ABCADEAE 
EXPENDED 


ABCADB 
CIRCUI 
T 
ABCADEAE 
EXPENSES 
ABCADB 
w EDNESD 
AY 
ABCADEAE 
EXTENDED 


ABCADB 
LOG 
ISTICS 
ABCADEAFA 
ELSEWHERE 


ABCADB 
EXPL 
OSIONS 
ABCADEAFGA 
EXPERIENCE 
ABCADB 
PREPAR 
lNG 
ABCADEB 
c 
ENTERIN 
G 


ABCADB 
1M 
PROPER 
ABCADEB 
ENTERIN 
G 


ABCADB 
PROPER 
ABCADEB 
R 
ESPECTS 
ABCADBA 
INSIGNI 
A 
ABCADEB 
INCIDEN 
T 


ABCADBC 
PREPARE 
ABCADEB 
M 
IS FIRES 
ABCADBCEFCGG 
PREPAREDNESS 
ABCADEBCE 
INCIDENCE 
ABCADBD 
PREPARA 
TION 
ABCADEC 
M 
ANDATED 


ABCADBEFD 
CIRCUITOU S 
ABCADEC 
s 
ECRETAR 
y 


ABCADC 
R 
ADIATI 
ON 
ABCADEC 
GYR 
OSCOPIC 
ABCADC 
ST 
ANDARD 
ABCADECA 
REARGUAR D 


ABCADC 
v 
ARIATI 
ON 
ABCADECAFD 
D 
ISTINCTION 
ABCADC 
ASIATI 
c 
ABCADECFC 
CONCERNING 
ABCADC 
AVIATI 
ON 
ABCADEDA 
co 
NFINEMEN 
T 


ABCADC 
R 
EVIEWI 
NG 
ABCADEDAFB 
INVITATION 
ABCADC 
EXTENT 
ABCADEDBD 
SUBSTITUT E 


ABCADC 
I 
NVENTE D 
ABCADEDBDE 
SUBSTITUTI ON 
ABCADC 
TACTIC 
s 
ABCADEDC 
u 
EUTENANT 


ABCADC 
s TARTER 
ABCADEDFGA 
ENTERPRISE 
ABCADC 
ZIGZAG 
ABCADEDFGDBC 
CONCILIATION 
ABCADCA 
co 
NVENIEN T 
ABCADEDFGFB 
ENTERPRISIN G 


ABCADCB 
co 
NDENSED 
ABCADEE 
p 
ROGRESS 
ABCADCB 
TACTICA L 
ABCADEEBFGHC 
CANCELLATION 
ABCADCEFBGABC 
ENTERTAINMENT 
ABCADEED 
CANCELLE 
D 
. ABCADCEFGED 
CONCENTRATE 
ABCADEEFBC 
CONCESSION 
ABCADCEFGEHC 
CONCENTRA TIN G 
ABCADEEFGD 
p 
ROGRESSIVE 
ABCADCEFGEHBC 
CONCENTRATION 
ABCADEFA 
ECHELONE 
D 


ABC ADD 
D 
EPRESS 
ION 
ABCADEFA 
ENVELOPE 
ABC ADD 
EXCESS 
ABCADEFA 
EXPEDITE 


ABC ADD 
D 
!STILL 
ABCADEFA 
EXPERIME 
NT 


ABC ADD 
p 
OSTOFF 
ICE 
ABCADEFAB 
INDICA TIN 
G 


ABC ADD 
B 
OYCOTT 
ABCADEFAB 
D 
ISTINGUIS 
H 


ABCADDA 
AMBASSADOR 
ABCADEFABGADE 
D 
ISTINGUISHING 
ABC ADD A 
EXPELLE D 
ABCADEFAGB 
INDICATION 
ABCADDECCF A 
UNSUCCESSFU L 
ABCADEFB 
ADVANCED 
ABCADDEFA 
EXCESSIVE 
ABCADEFBA 
EXT 
RAORDINAR 
y 


ABCADEA 
ADVANTA 
GE 
ABCADEFC 
BOMBARDM 
ENT 


ABCADEA 
ADVANTA 
GEOUS 
ABCADEFC 
CIRCULAR 
ABCADEA 
D 
ECREASE 
ABCADEFC 
u 
NT ENABLE 


ABCADEA 
s 
EPTEMBE 
R 
ABCADEFCGHB 
RETROACTIVE 
ABCADEA 
R 
EQUESTE 
D 
ABCADEFD 
ADVANCIN 
G 


ABCADEA 
D 
ISCIPU 
NE 
lABCADEFD 
EXTEND IN 
G 
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Table D-3 ~. List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


ABCADEFD 
ABCADEFE 
ABCADEFE 
ABCADEFE 
ABCADEFE 
ABCADEFE 
ABCADEFE 
ABCADEFE 
ABCADEFEA 
ABCADEFGA 
ABCADEFGA · 
ABCADEFGAF 
ABCADEFGB 
ABCADEFGB 
ABCADEFGBC 
ABCADEFGC 
ABCADEFGC 
ABCADEFGD 
ABCADEFGDC 
ABCADEFGE 
ABCADEFGF 
ABCADEFGHAB 
ABCADEFGHCA 
ABCADEFGHCFIG 
ABCADEFGHEIGCF 
ABCADEFGHH 
ABCADEFGHIAJF 
ABCADEFGHIB 
ABCADEFGHIE 
ABCADEFGHIGBH 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 


~SCELLANEOUSPATTERNS-Continued 


EXTERIOR 
CONCRETE 


EXPEDITI 
NG 
EXPEDITI 
ON 
OBSOLETE 


G ONIOMETE 
R 


PURPOSES 
RECRUIT! 
NG 


C COMPOSITIO 
N 


EXPENSIVE 
EXTENSIVE 
ECHELONMEN T 


C ASUALTIES 
CIRCULA TI ON 
CONCLUSION 
INDICATED 
S TRATEGICA L 


EXTENSION 
CONCEALMEN T 


REPRISALS 
BOMBARDED 
C ONFORMA TION 


EXTERMINATE 
EXTERMINATION 


REORGANIZATION 


R ESPECTFULL 
Y 
CIRCUMSTANCES 
RETROACTIVE 
GEOGRAPHICA 
L 


COMP 


PA 
SPA 


HIN 


CIRCUMST ANTIA L 
LETEL 
Y 


AWKWA 
RD 


CAPAC 
ITY 
CIFIC 
CIFIC 


DE RED 


DIVID 
E 
GARAG 
E 


C ITATI 
ON 
LEVEL 
P 
REFER 
REFER. 


P RESER 


HOS u 


RESER 


TAXAT 
TILIT 
TILIT 


VATION 
VATION 
ION 
y 
y 


ABCBA 
ABCBAA 
ABCBAAB 
ABCBAB 
ABCBAB 
ABCBABDEB 
ABCBABDEB 
ABCBADA 
ABCBADB 
ABCBADB 
ABCBADB 
ABCBADBC 
ABCBADEB 
ABCBCDBA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDAB 
ABCBDAB 
ABCBDABA 
ABCBDABD 
ABCBDABDEA 
ABCBDAEF.GB 
ABCBDAEFGHG 
ABCBDCBA 
ABCBDDBA 
ABCBDEA 
ABCBDEA 
ABCBDEA 
ABCBDEAEC 
ABCBDEBA 
ABCBDEBA 
ABCBDEBA 
ABCBDEBA 
ABCBDEFA 
ABCBDEFA 
ABCBDEFBA 
ABCBDEFGA 
ABCBDEFGBA 
ABCBDEFGHFA 
ABCBDEFGHIJBA 
ABCCA 
ABCCA 
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AC 
TIVIT 
Y 
U SELESS 
P REFERRE 
D 


DIVIDI 
NG 


AC 
TIVITI 
ES 
P 
REFERENCE 
REFERENCE 


MINIMUM 


P RESERVE 
RESERVE 


REVERSE 


RESERVES 
SPE 
CIFICA TI ON 


REMEMBER 
DEFEND 


DEPEND 
MU 
NITION 
S 
RESEAR 
CH 
STATES 
STATUS 


IN 
TEREST 


DEFENDE 
R 
E NGAGING 
DEFENDED 
DEPENDEN T 


STATISTICS 


DEPENDABLE 
DEPENDABILI TY 
PARAGRAP H 
DEFERRED 
E CONOMIC 


DAMAGED 


PO 
LITICAL 


MANAGEMEN 
T 
DEFEATED 


DESERTED 
RECEIVER 


REPEATER 


REJECTOR 
STATIONS 
DEVELOPED 


R ESISTANCE 


DETERMINED 


DISINFECTED 
DECENTRALIZED 


LITTL E 


PASSP ORT 
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Table D-3 ~. List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


~SCELLANEOUSPATTERNS-Continued 


ABCCA 
STREET 
ABCDA 
M ARTIA 
L 


ABCCABDEC 
CROSSROADS 
ABCDA 
E AS1WA 
RD 


ABCCBADED 
MILLIMETE R 
ABCDA 
NATURA 
L 


ABCCBCA 
BE GINNING 
ABCDA 
NATURA 
LIZE 
ABCCBDA 
INF LAMMABL 
E 
ABCDA 
TE CHNIC 
AL 


ABCCDA 
COLLEC 
T 
ABCDA 
COUNC 
IL 


ABCCDA 
CORREC 
T 
ABCDA 
R EACHE 
D 


ABCCDA 
TRIGGER 
ABCDA 
LEAGUE 


ABCCDA 
RUBBER 
ABCDA 
EASTE 
RLY 
ABCCDA 
RUNNER 
ABCDA 
EASTE 
RN 


ABCCDA 
SPOOLS 
ABCDA 
W EATHE 
R 


ABCCDA 
SPOONS 
ABCDA 
H EAVIE 
R 


ABCCDA 
SUGGES 
T 
ABCDA 
INS ECURE 
ABCCDA 
SUPPOS 
E 
ABCDA 
S ECURE 
ABCCDA 
TURRET 
ABCDA 
R EDUCE 
ABCCDAA 
SUCCESS 
ABCDA 
SCH EDULE 
ABCCDAAEB 
SUCCESSFU 
L 
ABCDA 
B EFORE 
ABCCDAAEBFF 
SUCCESSFUL 
y 
ABCDA 
R EFUGE 
ABCCDAAEFD 
SUCCESSIVE 
ABCDA 
R EFUSE 
ABCCDAB 
P RESSURE 
ABCDA 
REGIME 
NT 


ABCCDAEC 
TERRITOR 
y 
ABCDA 
REGIME 
NTAL 


ABCCDAED 
CORRECTE 
D 
ABCDA 
EITHE 
R 


ABCCDAEFB 
COLLECTIO 
N 
ABCDA 
FUS ELAGE 


ABCCDAEFB 
CORRECTIO 
N 
ABCDA 
D ELIVE 
R 


ABCCDAEFBC 
CONNECTION 
ABCDA 
GRENADE 


ABCCDAEFC 
CONNECTIN 
G 
ABCDA 
ERASE 


ABCCDAEFDGG 
CORRECTNESS 
ABCDA 
OPERATE 
ABCCDEA 
GASSING 
ABCDA 
RESCUE 
ABCCDEA 
GETTING· 
ABCDA 
PR ESIDE 
NT 


ABCCDEA 
ST RAGGLER 
ABCDA 
RESUME 
ABCCDEA 
INTERRUPT 
ABCDA 
D EVICE 
ABCCDEAB 
IN TERRUPTE 
D 
ABCDA 
D EVISE 
ABCCDEAD 
COMMENCE 
ABCDA 
GOING 


ABCCDEAD 
COMMERCE 
ABCDA 
THOUGH 
ABCCDEADCDE 
COMMENCEMEN 
T 
ABCDA 
CHURCH 
ABCCDEBFGHDA 
DISSEMINATED 
ABCDA 
F IGHTI 
NG 


ABCCDEFA 
COMMUNIC 
ATE 
ABCDA 
INFLI 
CT 
ABCCDEFA 
SUPPLIES 
ABCDA 
EXT INGUI 
SH 


ABCCDEFAGHFBE 
COMMUNICATION 
ABCDA 
IN QUI 
RE 
ABCCDEFBGHDGAD 
CORRESPONDENCE 
ABCDA 
INQUI 
RY 
ABCCDEFGA 
R EAPPOINTE 
D 
ABCDA 
INS PI 
RE 


ABCCDEFGHAFG 
R EAPPOINTEMENT 
ABCDA 
LOCAL 
ABCDA 
S ABOTA 
GE 
ABCDA 
LAU NCHIN 
G 


ABCDA 
R AILWA 
y 
ABCDA 
CO NDEMN 


ABCDA 
ANIMA 
L 
ABCDA 
MACHI NEGUN 


ABCDA 
S ANITA 
RY 
ABCDA 
NO TIN 
G 


ABCDA 
MARSHA 
L 
ABCDA 
EXPANSION 
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Table D-3 (G1. List of words used in military text arranged 
alphabetically according to word pattern (D)--Continued 


~SCELLANEOUSPATTERNS-Continued 


ABCDA 
co 
NTAIN 
ABCDABAB 
INCLININ 
G 


ABCDA 
MOU 
NTAIN 
ABCDABC 
M 
AINTAIN 


ABCDA 
I 
NTERN 
AL 
ABCDABC 
M 
AINTAIN 
ED 


ABCDA 
FRO 
NTUN 
E 
ABCDABCEFD 
PHOSPHORUS 
ABCDA 
I 
NTREN 
CH 
ABCDABEFA 
ENTRENCHE 
D 


ABCDA 
c 
ONTRO 
L 
ABCDAC 
L 
ANGUAG 
E 


ABCDA 
H 
ORIZO 
N 
ABCDAC 
ANYWAY 


ABCDA 
OUTBO 
ARD 
ABCDAC 
GOV 
ERNMEN 
T 


ABCDA 
PROMP 
T 
ABCDAC 
I 
NSTANT 
ABCDA 
RECOR 
D 
ABCDAC 
I 
NSTANT 
LY 
ABCDA 
REPOR 
T 
ABCDAC 
Dl 
SPERSE 
ABCDA 
RETUR 
N 
ABCDAC 
RES 
TRICTI 
ON 
ABCDA 
p 
RIMAR 
y 
ABCDAC 
PA 
TRIOTI 
c 


ABCDA 
RIVER 
ABCDACB 
co 
NDEMNED 


ABCDA 
ROGER 
ABCDACDAEFGB 
I 
NSTANT ANEO US 
ABCDA 
FA 
RTHER 
ABCDACEFDAF 
COINCIDENCE 
ABCDA 
FU 
RTHER 
ABCDAD 
MOVEME 
NT 
A BCD A 
NO 
RTHER 
LY 
ABCDAD 
A 
MUSEME 
NT 


ABCDA 
SA TIS 
FY 
ABCDAD 
RIGORO 
us 


ABCDA 
SHIPS 
ABCDADC 
s 
ANITATI 
ON 
ABCDA 
WAR 
SHIPS 
ABCDADEDAFB 
INSTITUTION 
ABCDA 
THIRT 
y 
ABCDADEFEAGC 
ANTIAIRCRAFT 
ABCDA 
WI 
THOUT 
ABCDAEA 
EXTREME 


ABCDA 
EX 
TRACT 
ABCDAEA 
MAXIMUM 


ABCDA 
TRACT 
ABCDAEAB 
su 
ITABILIT 
y 
ABCDA 
INS 
TRUCT 
ABCDAEABD 
UNI 
TEDSTATES 
ABCDA 
DES 
TRUCT 
ION 
ABCDAEAE 
PAR 
ENTHESES 
ABCDA 
1WENT 
y 
ABCDAEB 
F 
IGHTJNG 


ABCDA 
B 
UREAU 
ABCDAEB 
s 
IGHTING 
ABCDA 
WESTW 
ARD 
ABCDAEB 
RAILROA 
D 


ABCDAA 
R 
EFUGEE 
ABCDAEB 
REPORTE 
D 


ABCDAA 
c 
ODEBOO K 
ABCDAEB 
RETURNE 
D 


ABCDAA 
BU 
SINESS 
ABCDAEB 
TRACTOR 
ABCDAA 
Dl 
STRESS 
ABCDAEB 
INS 
TRUCTOR 
ABCDAA 
STRESS 
ABCDAEBA 
RECORDER 
ABCDAAD 
F 
ORENOON 
ABCDAEBC 
DE 
TONATION 


ABCDAB 
DECIDE 
ABCDAEBFBDC 
u 
NIDENTIFIED 


ABCDAB 
DECODE 
ABCDAEBFC 
SATISFACT ORY 
ABCDAB 
SP 
EARHEA D 
ABCDAEC 
AVERAGE 


ABCDAB 
R 
EDUCED 
ABCDAEC 
D 
I STRICT 
ABCDAB 
ENTREN CH 
ABCDAEC 
OUTPOST 
ABCDAB 
ERASER 
ABCDAECA 
TWENTIET 
H 


ABC DAB 
GEORGE 
ABCDAECAB 
I 
NTERNMENT 


ABCDAB 
POSTPO 
NE 
ABCDAECB 
D 
ISTRICTS 
ABCDAB 
RETIRE 
ABCDAECD 
L 
ABORATOR Y 
ABC DAB 
ES 
TIMATI 
ON 
ABCDAECE 
OUTPOSTS 
ABCDABA 
DECIDED 
ABCDAECFD 
EX 
AMINATION 
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Table D-3 ez1. List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


MISCELLANEOUS PA TIERNS- Continued 


ABCDAED 
T 
RAVERSE 
ABCDBCEA 
A 
ERODROME 
ABCDAEE 
ACTUALL 
y 
ABCDBEA 
INCENDI 
ARY 
ABCDAEE 
EXPRESS 
ABCDBEA 
PR 
OTECTIO 
N 
ABCDAEE 
THIRTEE 
N 
ABCDBEA 
IN 
TERCEPT 
ABCDAEEFAB 
THIRTEENTH 
ABCDBEAB 
IN 
TERCEPTE 
D 


ABCDAEFA 
OV 
ERWHELME 
D 
ABCDBEAE 
c 
ONTINUOU s 


ABCDAEFAB 
INFLICT IN 
G 
ABCDBEAFB 
INVENTION 
ABCDAEFB 
p 
RESCRIBE 
D 
ABCDBEAFCDB 
QU 
ARTERMASTER 
ABCDAEFBE 
0 
NEHUNDRED 
ABCDBEAFD 
INCENTIVE 
ABCDAEFC 
M 
ANUFACTU 
RE 
ABCDBEAFD 
INTENSIVE 
ABCDAEFC 
PR 
ESIDENTI 
AL ABCDBECA 
E 
NCIRCLIN 
G 


ABCDAEFC 
D 
ISTRIBUT 
E 
ABCDBEFAGABC 
ENTANGLEMENT 


ABCDAEFCA 
D 
ISTRIBUTI 
NG 
ABCDBEFAGEB 
TEMPERATURE 


ABCDAEFCA 
D 
ISTRIBUTI 
ON 
ABCDBEFBA 
DECREASED 
ABCDAEFD 
F 
LASHUGH 
T 
ABCDBEFCDAB 
c 
ONTINUATION 
ABCDAEFD 
c 
ONTROVER 
SY 
ABCDBEFGA 
YESTERDAY 
ABCDAEFD 
A 
SCENSION 
ABCDBEFGAB 
ARMOREDCAR 
ABCDAEFD 
WINDWARD 
ABCDBEFGBCHIA 
DISTINGUISHED 
ABCDAEFDB 
RESTRICTE 
D 
ABCDBEFGHA 
p 
ERFORMANCE 


ABCDAEFDE 
RESTRICT! 
ON 
ABC DCA 
AIRCRA 
FT 


ABCDAEFE 
PAR 
ENTHESIS 
ABCDCA 
CRITIC 
ABCDAEFE 
RETURNIN 
G 
ABCDCA 
CRITIC 
AL 


ABCDAEFEGE 
RE 
SPONSIBILI 
TY 
ABCDCA 
D 
EFICIE 
NT 


ABCDAEFF 
REDCROSS 
ABCDCA 
ENGAGE 
ABCDAEFGAHB 
INSPIRATION 
ABC DCA 
p 
OSITIO 
N 


ABCDAEFGC 
REGARDING 
ABC DCA 
PR 
OVISIO 
N 


ABCDAEFGD 
RESTRAINT 
ABC DCA 
Fl 
REALAR M 


ABCDAEFGFE 
TR 
ANSPACIFIC 
ABCDCAAC 
PHILIPPI NES 
ABCDAEFGHC 
TWENTYFIVE 
ABCDCAB 
ANTITANK 


ABCDAEFGHFBC 
CONSCRIPTION 
ABCDCABCA 
I 
NDEPENDENT 
ABCDBA 
PR 
ACTICA 
L 
ABCDCAC 
CRITIC I 
SE 


ABCDBA 
w 
ATERTA 
NK 
ABCDCAC 
CRITIC! 
SM 
ABC DBA 
DIV 
EBOMBE 
R 
ABC DC AD 
OPINION 


ABCDBA 
ENGINE 
ABCDCAEAB 
ENGAGEMEN 
T 


ABCDBA 
s 
ENTINE 
L 
ABCDCAEB 
p 
OSITIONS 


ABCDBA 
R 
EVOLVE 
ABCDCAED 
D 
EFICIENC Y 
ABCDBA 
s 
ITUATI 
ON 
ABCDCAED 
PR 
OVISIONS 
ABCDBAA 
ENGINEE 
R 
ABCDCAEFD 
CHARACTER 
ABCDBAAEDBC 
ENGINEERING 
ABCDCAEFDGHEGA 
CHARACTE Rl STIC 
ABCDBAB 
LIABILI 
TY 
ABCDCBABC 
IN 
TERPRETER 


ABCDBAD· 
RE 
TAUATI 
ON 
ABCDCBCEA 
HO 
STILI TIES 
ABCDBAEAD 
D 
ISPOSITIO 
N 
ABCDCEA 
BRI 
DGEHEAD 


ABCDBAEBE 
u 
NEXPENDED 
ABCDCEA 
M 
ED I CINE 


ABCDBBA 
ANTENNA 
ABCDCEA 
D 
EFINITE 


ABCDBBA 
D 
ISCUSSI 
ON 
ABCDCEA 
s 
EPARATE 
ABCDBBDEA 
TRA 
NSMISSION 
ABCDCEA 
SURPRIS E 


ABCDBCAEB 
INTENTION 
ABCDCEAFC 
QU 
ALIFICATI 
ON 
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Table D-3 ~· List of words used in military text arr~nged alphabetically 
according to word pattern (D)--Continued 


M~CELLANEOUSPATTERNS7 Continued 


ABCDCEAFE 
p 
ERSISTENT 
ABCDEA 
R 
EPULSE 
D 


ABCDCEBA 
ELIGIBLE 
ABCDEA 
CONSID 
ERABLE 


ABCDCECA 
D ESTITUTE 
ABCDEA 
INT 
ERPOSE 
ABCDCECDA 
co 
NSTITUTIN G 
ABCDEA 
s 
ERVICE 
ABCDCEFGAB 
PHOTOGRAPH Y 
ABCDEA 
EUROPE 
ABCDCEFGCA 
OEM 
OBILIZA TIO N 
ABCDEA 
EUROPE 
AN 


ABCDCEFGCA 
M OBILIZATIO N 
ABCDEA 
EXCITE 
ABCDDA 
R 
ECOMME ND 
ABCDEA 
T 
HROUGH 
ABCDDA 
T 
OBACCO 
ABCDEA 
IDENTI 
CAL 
ABCDDA 
SHELLS 
ABCDEA 
IDENTI 
FY 


ABCDDAB 
B EACHHEAD 
ABCDEA 
INHABI 
TED 


ABCDDAEACBE 
INEFFICIENC 
y 
ABCDEA 
D I RECTI 
ON 


ABCDDAEFAF 
R 
ECOMMENDED 
ABCDEA 
MEDIUM 


ABCDDAEFGIDCE 
R 
ECOMMENDA TION 
ABCDEA 
SY 
NCHRON IZE 
ABCDDEA 
DROPPED 
ABCDEA 
JU 
NCTION 
ABCDDEA 
AI 
RSUPPOR 
T 
ABCDEA 
co 
NFIDEN 
T 


ABCDDEA 
A RTILLER 
y 
ABCDEA 
NO THIN 
G 


ABCDDEAEC 
COEFFICIE 
NT 
ABCDEA 
E 
NT RAIN 


ABCDDECDFA 
SCHOOLHOUS E 
ABCDEA 
L OCATIO 
N 


ABCDDEFCGHA 
MI 
SCELLANEOUS 
ABCDEA 
REV 
OLUTIO 
N 


ABCDDEFEACGE 
CLASSIFICATI ON 
ABCDEA 
DEC 
ORATIO 
N 


ABCDDEFGGEDBA 
R 
ECONNAISSANCE 
ABCDEA 
T 
ORPEDO 
ABCDEA 
AERONA 
UTICS 
ABCDEA 
OVERCO MING 
ABCDEA 
R 
AILHEA 
D 
ABCDEA 
T 
RAILER 
s 
ABCDEA 
AIRPLA 
NE 
ABCDEA 
T 
RAWLER 
ABCDEA 
AMBULA 
NCE 
ABCDEA 
DI 
RECTOR 


ABCDEA 
co 
ASTGUA 
RD 
ABCDEA 
REPAIR 


ABCDEA 
M ATERIA · 
L 
ABCDEA 
NO. RTHWAR D 


ABCDEA 
s A TURD A 
y 
ABCDEA 
c 
RUISER 
ABCDEA 
c 
AUSEWA 
y 
ABCDEA 
I 
SLANDS 


ABCDEA 
N A UTICA 
L 
ABCDEA 
STRIPS 
ABCDEA 
BLOCKS 
USTER 
ABCDEA 
SUNRIS 
E 


ABCDEA 
ME 
CHANIC 
ABCDEA 
TARGET 


ABCDEA 
CHEMIC 
AL 
I IABCDEA 
NOR 
THEAST 
ABCDEA 
CONDUC 
T 
ABCDEA 
THREAT 
ABCDEA· 
DISLOD 
GE 
ABCDEA 
NOR 
THWEST 
ABCDEA 
DOWNED 
ABCDEA 
TWELFT H 


ABCDEA 
B ECAUSE 
ABCDEA 
L UMINOU S 
ABCDEA 
D 
ECIPHE 
R 
I ABCDEAA 
EIGHTEE N 
ABCDEA 
D ECLARE 
· ABCDEAAE 
SUBMISSI ON 
ABCDEA 
OBJ 
ECTIVE 
ABCDEAAFED 
EIGHTEENTH 


ABCDEA 
L 
ECTURE 
ABCDEAB 
INVADIN G 
ABCDEA 
v 
EHICLE 
s 


1 ABCDEAB 
F 
LEXIBLE 


ABCDEA 
ENCODE 
;ABCDEAB 
NATIONAL 


ABCDEA 
COMP 
ENSATE 
ABCDEAB 
REQUIRE 
ABCDEA 
ENTIRE 
ABCDEAB 
RESTORED 
ABCDEA 
R EPLACE 
1 ABCDEAB 
ou 
TSKIRTS 
I 
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Table D-3 ~ 
List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


ABCDEABA 
ABCDEABD 
ABCDEABE 
ABCDEABF 
ABCDEABFB 


ABCDEABFD 


ABCDEABFDC 
ABCDEABFE 
ABCDEABFFGHD 
ABCDEAC 
ABCDEAC 
ABCDEACFB 
ABCDEAD 
ABCDEAD 
ABCDEAD 
ABCDEADFD 
ABCDEAE 
ABCDEAE 
ABCDEAE 
ABCDEAE 
ABCDEAEFGC 
ABCDEAFA 


ABCDEAFAGE 


ABCDEAF AGHEAID 


ABCDEAFB 
ABCDEAFB 
ABCDEAFBC 
ABCDEAFC 
ABCDEAFC 
ABCDEAFC 
ABCDEAFD 
ABCDEAFE 
ABCDEAFE 
ABCDEAFE 
ABCDEAFF 
ABCDEAFGA 
ABCDEAFGAFB 
ABCDEAFGD 
ABCDEAFGE 
ABCDEAFGEE 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBA 


ABCDEBAB 


MISCELLANEOUS PATTERNS- Continued 


DEMANDED 
IMPEDIME 
NT A 
AT OMICBOMB 


REPAIRED 
REQUIREME 
NT 


NATIONAL! 
SM 


NA TIONALIT 
Y 
MARKSMANS 
HIP 


SHARPSHOOTER 
AUTOMAT 
IC 


AI RCONTRO 
L 
ANTEDATIN 
G 


CONTACT 
V ICTORIO 
US 
C RUISERS 


THREATEN£ 
D 


ENCODED 


P ERMANEN 
T 


FORTIFI ED 
REQUIRI NG 
TRADITIONA 
L 
R EPLACEME 
NT 


EXCITEMENT 
IDENTIFICATION 
CLERICAL 
INVASION 
RESOURCES 
DES IGNA TION . 


RES IGNATION 


CO NFIDENTI 
AL 
D IMENSION 


ADJUTANT 
INTERIOR 
I NFLUENCE 


R EADINESS 


D ECIPHERME NT 
MEDIUMBOMBE 
R 


LEGISLATI 
ON 
CO MPARTMENT 


SMOKESCREE N 
DELAYED 
D ETONATE 


INDEMNI 
TY 
D ISPERSI 
ON 
RECOVER 
SURPLUS 


ARBITRAR Y 


ABCDEBAED 
ABCDEBFA 
ABCDEBFAGA 
ABCDEBFCAGBF 
ABCDEBFDGA 
ABCDEBFGAF 
ABCDEBFGHA 
ABCDEBFGHBCGIA 
ABCDECA 
ABCDECA 
ABCDECA 
ABCDECA 
ABCDECAB 
ABCDECAC 
ABCDECACFE 
ABCDECAFCDA 
ABCDECBA 
ABCDECBA 
ABCDECBA 
ABCDECBAFB 
ABCDECCFA 
ABCDECDCAFC 
ABCDECFA 
ABCDECFA 
ABCDECFBA 
ABCDECFEA 
ABCDEDA 
ABCDEDA 


ABCDEDA 


ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDA 


ABCDEDAB 


ABCDEDAC 
ABCDEDAFC 
ABCDEDFA 
ABCDEDFA 
ABCDEDFA 
ABCDEDFAC 
ABCDEDFAC 
ABCDEDFACDGB 
ABCDEDFCAB 
ABCDEDFCGAHB 
ABCDEDFDA 


~~·IP'I ....... , ... IAI 
\lliV .. t r I Llll:.l-. I IK._ 


ARBITRA TI 
ON 


B RIGADIER 


ENCOUNTER£ D 
INTERNATIONA 
L 
NAVIGATION 
H EADQUARTER S 


R ESPONSIBLE 


NATURALIZATION 
E NLISTIN G 


PRINCIP 
AL 


PRINCIP 
LE 


SKIRMIS H 
I NTERMENT 
I NTERVENE 
M AINTENANCE 


TRANSATLANT 
IC 


NEGLIGEN 
T 


REVOLVER 


P ROTECTOR 
NEGLIGENCE 
DISCUSSED 


I NTERFERENCE 
ENCIRCLE 
EVACUATE 
SEAPLANES 
STANDARDS 


N .EWSPAPE 
R 
MARITIM 
E 


CO NTRABAN 
D 


C OALITIO 
N 
BA ROMETER 
GY ROMETER 


HYD ROMETER 


HYG ROMETER 
PSYCH ROMETER 


C ONDITION 
REC OGNITION 


N EWSPAPERS 
DICTATED 
EXCAVATE 


EXHIBITE 
D 


ANTICIPAT E 


CLEARANCE 
ANTICIPATION 
INTERESTIN 
G 


INAUGURATION 
ARTIFICIA 
L 
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Table D-3~ List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


MISCELLANEOUS PATIERNS- Continued 


ABCDEDFDEAB 
C ONSTITUTION 
ABCDEFA 
SERIOUS 
LY 
ABCDEDFDGHAIF 
CHRONOLOGICAL 
ABCDEFA 
E STABLIS 
H 


ABCDEDFGA 
PR OCLAMA TIO 
N 
ABCDEFA 
TONIGHT 
ABCDEDFGA 
P RELIMINAR 
y 
ABCDEFAA 
EMPLOYEE 
ABCDEDFGABHED 
INDETERMINATE 
ABCDEFAAF 
T RANSFERRE 
D 


ABCDEDFGADB 
P RELIMINARIE 
s 
ABCDEFAAGC 
T RANSFERRIN 
G 


ABCDEDFGHAGD 
ADMINISTRATI 
VE IABCDEFAB 
INCLUDIN 
G 


ABCDEDFGHAGDIE 
ADMINISTRATION 
ABCDEFAB 
RADIOGRA M 


ABCDEEA 
ENROLLE 
D 
ABCDEFAB 
P REMATURE 


ABCDEEA 
P ERSONNE 
L 
ABCDEFABA 
EMPLACEME NT 


ABCDEEA 
IMPOSSI 
BLE 
ABCDEFAC 
INTEGRIT 
y 


ABCDEEACB 
S IGNALLING 
ABCDEFAC 
P RISONERS 
ABCDEEAFDBC 
INTELLIGENT 
ABCDEFACB 
IN TRODUCTOR 
y 


ABCDEEAFDBGD 
INTELLIGENCE 
ABCDEFACD 
ALTERNATE 


ABCDEEDFGBA 
RECONNOITER 
ABCDEFACGF 
ALTERNATIN 
G 


ABCDEEDFGBAFE 
RECONNOITERIN G 
ABCDEFAD 
CONTRACT 
ABCDEEFAB 
ENROLLMEN 
T 
ABCDEFAD 
D ESTROYER 
ABCDEEFAB 
C ONFESSION 
ABCDEFAD 
INTER VIE 
w 


ABCDEEFAE 
EMBASSIES 
ABCDEFAD 
OPERATOR 
ABCDEEFDGFA 
DISAPPEARED 
ABCDEFAD 
Fl RECONTRO L 


ABCDEEFGCAHB 
INTERRUPTION 
ABCDEFAD 
P ROCEDURE 
ABCDEFA 
C ABLEGRA 
M 
ABCDEFADB 
D ESTROYERS 
ABCDEFA 
AMERICA 
N 
ABCDEFADF 
T RANSVERSE 
ABCDEFA 
C AMOUFLA 
GE 
ABCDEFAE 
D ISCONTIN 
lJE 


ABCDEFA 
CHRONIC 
AL 
ABCDEFAEGHEC 
D ISCONTINUANC 
E 


ABCDEFA 
CONFLIC 
T 
ABCDEFAF 
EXPANDED 
ABCDEFA 
DfS CREPANC 
y 
ABCDEFAF 
I MPROVEME 
~T 
ABCDEFA 
S EABORNE 
ABCDEF.AFCD 
R ADIOSTATIO 
~ 
ABCDEFA 
EMPLOYE 
R 
ABCDEFAGA 
ENCIPHERE 
D 


ABCDEFA 
ENCIPHE 
R 
ABCDEFAGAB 
ENFORCEMP.J T 


ABCDEFA 
ENFORCE 
ABCDEFAGB 
AEROPLANE 
ABCDEFA 
ENLISTE 
D 
ABCDEFAGB 
D ETACHMENT 
ABCDEFA 
D EPLOYME 
NT 
ABCDEFAGB 
INFLATION 


ABCDEFA 
EQUIPME 
NT 
ABCDEFAGB 
REINFORCE 
ABCDEFA 
FIGHT ERPLANE 
ABCDEFAGB 
TRAJECTOR 
y 
ABCDEFA 
ESCORTE 
D 
ABCDEFAGBDB 
REIMBURSE\1 E 
:\T 
ABCDEFA 
D ESCRIBE 
ABCDEFAGBHBD 
REINFORCEME:\ T 


ABCDEFA 
J ETPLANE 
ABCDEFAGC 
INTERDICT 


ABCDEFA 
EXCLUDE 
ABCDEFAGCAHB 
INTERDICTIO:\ 
ABCDEFA 
INCLUSI 
VE 
ABCDEFAGE 
D EPARTMENT 


ABCDEFA 
LOGICAL 
ABCDEFAGEC 
D EPARTMENTA 
L 


ABCDEFA 
F ORMATIO 
N 
ABCDEFAGFD 
REGISTRATI 
ON 
ABCDEFA 
T RANSFER 
ABCDEFAGHAB 
ENCIPHERME'-1 
T 


ABCDEFA 
REGULAR 
ABCDEFAGHEBC 
CONFISC AT! ON 
ABCDEFA 
P RISONER 
ABCDEFAGHFD 
INVESTIGATE 


ABCDEFA 
SAILORS 
ABCDEF AGHF AlB 
INVESTIGATION 
ABCDEFA 
SECTORS 
ABCDEFAGHFAIBE 
INVESTIGATIONS 
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Table D-3 ~. List of words used in military text arranged alphabetically 
according to word pattern (D)--Continued 


MISCELLANEOUS PATIERNS-Continued 


ABCDEF AGHIF 
B 
REAKTHROUGH 
ABCDEFGA 
M 
ECHANIZE 
D 


ABCDEFBA 
DECLARED 
ABCDEFGA 
T 
ECHNIQUE 
ABCDEFBA 
DEPARTED 
ABCDEFGA 
R 
ECOGNIZE 
ABCDEFBA 
DEPLOYED 
ABCDEFGA 
ENFILADE 


ABCDEFBA 
DEPORTED 
ABCDEFGA 
EQUALIZE 
ABCDEFBA 
DETACHED 
ABCDEFGA 
EQUIPAGE 
ABCDEFBA 
EMPLOYME 
NT 
ABCDEFGA 
EQUIVALE 
NT 


ABCDEFBA 
ENTRAINE 
D 
ABCDEFGA 
D 
ESIGNATE 
ABCDEFBA 
REGISTER 
ABCDEFGA 
EXCHANGE 
ABCDEFBA 
p 
ROJECTOR 
ABCDEFGA 
GROUPING 
ABCDEFBAB 
MEASUREME 
NT 
ABCDEFGA 
GUARDING 


ABCDEFBABGHD 
MEASUREMENTS 
ABCDEFGA 
INSECURI 
TY 


ABCDEFBGA 
ENDURANCE 
ABCDEFGA 
D 
IPLOMATI 
c 


ABCDEFBGBA 
DECIPHERED 
ABCDEFGA 
E 
NTRUCKIN 
G 


ABCDEFCA 
ESTIMATE 
ABCDEFGA 
NUMB ERIN 
G 


ABCDEFCA 
NORTHERN 
ABCDEFGA 
OBJECTIO 
N 


ABCDEFCAB 
ESTIMATES 
ABCDEFGA 
OPE RATIO 
N 


ABCDEFCAD 
D 
OMINATION 
ABCDEFGA 
SOLDIERS 
ABCDEFCAGFC 
ESTIMATED AT 
ABCDEFGA 
DI 
SPATCHES 
ABCDEFCBA 
DETONATED 
ABCDEFGA 
WITHDRAW 


ABCDEFCCFA 
DISTRESSED 
ABCDEFGA 
WITHDREW 


ABCDEFCEA 
DISPERSED 
ABCDEFGAB 
D 
ESPATCHES 
ABCDEFCGA 
ELABORATE 
ABCDEFGAB 
u 
NDERSTAND 
ABCDEFDA 
D 
EPARTURE 
ABCDEFGAB 
WITHDRAW! NG 
ABCDEFDAB 
c 
USTOMHOUS 
E 
ABCDEFGABF 
ENLISTMENT 
ABCDEFDBAB 
INTER VENIN 
G 
ABCDEFGAC 
I 
NSTRUMENT 
ABCDEFDBCAGB 
INTERVENTION 
ABCDEFGAC 
F 
OUNDATION 
ABCDEFDEAB 
INTERFERIN 
G 
ABCDEFGACB 
, I 
NSTRUMENTS 
ABCDEFDGAB 
DEM 
ONSTRATION 
ABCDEFGAD 
SOUTHEAST 
ABCDEFDGAHCD 
INTERMEDIATE 
ABCDEFGAD 
SOUTHWEST 
ABCDEFDGHA 
HYDROGRAPH IC 
ABCDEFGADG 
SOUTHWESTE 
&'I 
ABCDEFEA 
R 
EINSTATE 
ABCDEFGAEHBC 
CONSTRUCTION 
ABCDEFEAB 
F 
INGERPRIN 
T 
ABCDEFGAFE 
IMPRACTICA 
BLE 


ABCDEFEAGACE 
R 
EINST ATEMENT 
ABCDEFGAG 
WITHDRAW A 
L 


ABCDEFEAGDB 
CERTIFICATE 
ABCDEFGAHB 
INSPECTION 
ABCDEFECACD 
THERMOMETER 
ABCDEFGAHCGIDE 
RECONSTRUCTION 
ABCDEFECAE 
CONFERENCE 
ABCDEFGBA 
DESCRIBED 
ABCDEFEDCGCAHB 
INTERPRETATION 
ABCDEFGBA 
DESTROYED 
ABCDEFEFA 
c 
OMPETITIO 
N 
ABCDEFGBA 
DETRAINED 


ABCDEFEGA 
D 
EMOBILIZE 
ABCDEFGBA 
REMAINDER 


ABCDEFEGA 
c 
OMPUTATIO 
N 
ABCDEFGBA 
TRANSPORT 
ABCDEFFA 
UN 
DERSTOOD 
ABCDEFGBACAHGD 
TRANSPORTATION 
ABCDEFFA 
IMPRESS I 
ON 
ABCDEFGBAE 
TRANSPORTS 
ABCDEFFAGE 
IMPRESSIVE 
ABCDEFGBHA 
ESTABLISHE 
D 


ABCDEFFEDAGBC 
INSTALLATIONS 
ABCDEFGBHIAKC 
ESTABLISHMENT 
ABCDEFFGAB 
c ONGRESSION 
AL 
ABCDEFGCAG 
CONFIDENCE 
ABCDEFGA 
DISARMED 
ABCDEFGCHEA 
RANGEFINDER 
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Table D-3 ~ 
List of words us~~ in m~~itary text arranged alphabetically 
according to word pattern (D)--Continued 


MUSCELLANEOUSPATTERNS-Continued 


I 
ABCDEFGDAHB 
INSTRUCTION 
ABCDEFGHBA 
DESPATCHED 
ABCDEFGDAHBC 
INSTRUCTIONS 
ABCDEFGHBIKA 
DISORGANIZED 
ABCDEFGDBFHA 
CE 
NTRALIZA TION 
ABCDEFGHCAEB 
INTRODUCTION 
ABCDEFGDHAIC 
OBSTRUCTIONS 
ABCDEFGHCAEB 
D 
ISCREPANCIES 
ABCDEFGDHF AE 
ORGANIZATION 
ABCDEFGHDAB 
c 
ONFIRMATION 


ABCDEFGEA 
H 
EAVYBOMBE 
R 
ABCDEFGHDGCA 
NORTHWESTERN 


ABCDEFGEHA 
D 
ESCRIPTIVE 
ABCDEFGHDIKA 
REVOLUTIONAR Y 


ABCDEFGFABF 
I 
NCOMPETENCE 
ABCDEFGHEEHA 
COUNTERATTAC K 


ABCDEFGFAG 
I 
NCOMPETENT 
ABCDEFGHFA 
D 
EMONSTRATE 


ABCDEFGGAG 
H 
EAVYLOSSES 
ABCDEFGHFCAG 
AGRICULTURAL 
ABCDEFGHA 
CONSPIRAC 
y 
ABCDEFGHIA 
DISPATCHED 


ABCDEFGHA 
DOMINATED 
ABCDEFGHIA 
OBSERVATIO 
N 


ABCDEFGHA 
c 
ENTRALIZE 
ABCDEFGHIA 
SUBMARINES 
ABCDEFGHA 
EXCLUSIVE 
ABCDEFGHIAB 
c 
ONVERSATION 


ABCDEFGHA 
EXPANSIVE 
ABCDEFGHIAE 
c 
OMPENSATION 
ABCDEFGHA 
EXPLOSIVE 
ABCDEFGHIAF 
R 
OADJUNCTION 
ABCDEFGHA 
MECHANISM 
ABCDEFGHIDAB 
c 
ONSIDERATION 
ABCDEFGHAB 
c 
ONSUMPTION 
ABCDEFGHIFKA 
SEARCHUGHTS 
ABCDEFGHADB 
INFORMATION 
ABCDEFGHIGBA 
DEMONSTRATED 
ABCDEFGHAGC 
CONY ALESCEN 
T 
ABCDEFGHIJDA 
SIMULTANEOUS 
ABCDEFGHBA 
DESIGNATED 
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Table D-4 (~.List of general digraphic idiomorphs (U) 


AB 
AB 
AB -- 
AB 


-G EN 
ER 
AL 
AL 
AR M- 
TH IER 
EF 
ER 
EN 
CE 


NE 
ED 
ED 
TH 
ER 
ES 
ER 
VE 
-P RO 
CE 
ED 
ED 
WH ER 
EV 
ER 


-S uc 
CE 
ED 
ED 
-C 
AR 
EL 
ES 
SN 
ES 
S- 
-D ET 
RA IN 
IN 
G- 
GE 
OR GE 
-L IN 
IN 
G- 
sc 
HO 
OL 
HO us 
E- 


I 


-M IN 
IN 
G- 
-I 
LL 
UM 
IN 
AT 
IN 
G 


OB 
TA 
IN 
IN 
G- 
IN 
CL 
IN 
E- 


QU 
IN 
IN 
E- 
-F IR 
IN 
GL 
IN 
E- 
I 


RA 
IN 
IN 
G- 
MA IN 
TA 
IN 
I 


RE 
MA IN 
IN 
G- 
-1 
NF 
AL u 
BI 
u 
TY 
! 
SH 
IN 
IN 
G- 
-A ME 
ND 
ME 
NT 
-T 
RA 
IN 
IN 
G- 
so 
ME 
TI 
ME 


CR 
IS 
IS 
-0 NE 
NI 
NE 
PO 
Sl 
TI 
ON ON 
NO 
TK 
NO 
WN 
-A RE 
RE 
EN 
FO 
RC 
ED 
NO 
WK. 
NO 
WN 
-A su su 
AL 
-A PP 
01 
NT 
ME 
NT 


BO 
TH 
TH IE- 
-C ON TE 
NT 
ME 
NT 
WI 
TH 
TH 
E- 
-c OM PR 
OM IS 
E- 
-P 
AR 
TI 
TI 
ON 
-P 
ON 
TO 
ON 


RE 
PE 
TI 
TI I ON 
-T HR ou GH ou IT- 
VI 
VI 
D- 
-N ow 
KN OW N- 
PH 
OS 
PH 
OR us 
AB -- 
AB 
PO 
ST 
PO 
NE 


'! 


TR 
00 PS 
HI 
PS 


-M AI 
NT 
AI 
N- 
PA 
RA 
PH 
RA 
SE 


RE 
AR GU 
AR D- 
-P 
RE 
FE 
RE 
NC 
E- 


CH 
UR 
CH 
IRE 
FE 
RE 
NC 
E- 
DE 
CI 
DE 
-T HE 
RE 
FO 
RE 
! 
DE co DE 
-P 
RE 
PA 
REI 
DI 
VI 
DI 
NG 
RE 
TI 
RE! 


SP 
EA 
RH 
EA D- 
RE 
VE 
RE 
NT 
-R ED uc 
ED 
-C RO ss 
RO 
AD S- 
-S CH 
ED 
UL 
ED 
CA 
RE 
LE ss 
NE ss 
-B EE 
NN 
EE 
DE D- 
AT 
TE 
MP 
TE 
D- 
EM BL 
EM 
TH 
AT 
TH 
E- 
AM EN 
DM EN T- 
-F OR TH 
WI 
TH 
co NT 
EN 
TM 
EN T- 
-I 
NV 
ES 
TI 
GA TI 
ON 
-S EV 
EN 
TE 
EN 
ES 
TI 
MA TI 
ON 
-S 
EV 
EN 
TE 
EN 
TH 
-D ES 
TI 
NA 
TI 
ON 


EN TR 
EN 
CH 
AC 
TI 
VI 
TI 
ES 


ER 
AS 
ER 
-H 
UM 
DR 
UM 


I 
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Tabte·D-4 ~-List of general digraphic idiomorphs (U) -continued 


AB -- -- 
AB 
AB -- -- 
-- 
AB 


-P 
AN 
AM AC 
·AN AL 
AR 
MO 
RE 
DC 
AR 
AR 
BI 
TR 
AR Y- 
EN 
FO 
RC 
EM 
EN T- 


AS so 
ON 
AS 
RE 
EN 
FO 
RC 
EM 
EN 
TS 
I 


AC 
CE 
PT 
AN 
CE 
IN 
DE 
TE 
RM 
IN 
AT E-j 


EM 
PL 
AC 
EM 
EN 
T- 
IN 
TE 
RE 
ST 
IN 
G- 
-Q UA 
RT 
ER 
MA ST 
ER 
IN 
TE 
RF 
ER 
IN 
G- 
-1 
NT 
ER 
PR 
ET 
ER 
IN 
TE 
RV 
EN 
IN 
G- 
-A cc 
ES 
so 
RI 
ES 
-I 
NC 
OM PE 
TE 
NC 
E- 
IN 
CL 
UD 
IN 
G- 
-C 
ON 
GR 
ES 
SI 
ON 
AL 
-D IR 
EC 
TF 
IR 
E- 
-D 
EM 
ON 
ST 
RA 
TI 
ON 
TO 
MO 
RR 
OW MO 
RN 
IN 
G- 
-C ON su 
MP 
TI 
ON 
PA 
NA 
MA 
CA 
NA L- 
PH 
OT 
OG 
RA 
PH 


-I 
NT 
ER 
ME 
NT 
TH 
IR 
TE 
EN 
TH 
-I 
NT 
ER 
VE 
NT 
IO 
N- 
co 
NT 
IN 
GE 
NT 
-C 
ON 
DI 
TI 
ON 
AB -- -- -- -- 
AB 
-T OM OR 
RO 
WM OR 
NI 
NG 
RA 
DI 
OG 
RA M- 
-I 
NS 
TA 
LL 
AT 
IO 
NS 


RE 
AS su 
RE 
-C 
ON 
CE 
NT 
RA 
TI 
ON 
-P 
RE 
MA TU 
RE 
-c ON 
FL 
AG 
RA 
TI 
ON 


-D EF 
EN 
Sl 
VE 
PO 
Sl 
TI 
ON 
-C ON 
SI 
DE 
RA 
TI 
ON 


IN 
TE 
RD 
IC 
TE 
D- 


QU AR TE 
RM 
AS 
TE .R- 
AB -- 
AB 
AB 
IN 
TE 
RP 
RE 
TE 
R- 
IN 
TE 
RR 
UP 
TE 
D- 
liN 
CL 
IN 
IN~ G- 
-F OR 
TI 
FI 
CA 
TI 
ON 
MA 
IN 
TA 
IN 
IN 
G- 
-- 
----- ---- 
~- ----- 
--- 
--~ ----- - 


D-40 
~ 
.................... . 


~Q'nlr 11.11:111' I IK ... 


r..nNt=lnr:'N"T'I41 
* 


Table D-5 (¥). List of play fair digraphic idiomorphs (U) 


AB 
BA 
AB 
BA 
sc 
AB 
BA 
RD 
SH 
EL 
LE 
D- 
AF 
FA 
BL 
E- 
-H 
EM 
ME 
Dl 
N- 
AF 
FA 
IR 
ST 
EM 
ME D- 
-B 
AG GAIGE 
. 
ST 
EP 
PE 
D- 
-H AW AI 
IA 
N- 
AV ER 
RE 
D- 
AL 
LA IRE AS 
co 
NF 
ER 
RE 
D- 
-B AL 
LA 
ST 
-I 
NT 
ER 
RE 
D- 
-F AL 
LA ICY 
-R EF 
ER 
RE 
D- 
IN 
ST 
AL 
LA 
TI 
ON s- 
ES 
SE 
NC 
E- 
-P AR AL LA. X- 
ES 
SE 
NT 
lA 
L- 
. AP 
PA 
RA 
TV S- 
AD 
DR 
ES 
SE 
S- 


I~ 


PA 
RE 
L- 
-C 
OM PR 
ES 
SE 
D- 
PA 
RE 
NT 
co 
NF 
ES 
SE 
D- 
AP 
PA 
RE 
NT 
LY 
IM 
PR 
ES 
SE 
D- 
AR 
RA 
NG E- 
-L ES 
SE 
N- 
AR 
RA Y- 
-M 
ES 
SE 
NG 
ER 
-B AR 
RA 
CK S- 
PR 
ES 
SE 
D- 
-B AR 
RA GE 
PR 
OF 
ES 
SE 
D- 
-E 
MB 
AR 
RA ss 
ED 
-P 
RO 
GR 
ES 
SE i D- 
-N AR 
RA 
Tl 
ON 
-s TR 
ES 
SE 
1 D- 


AS 
SA 
IL 
AN T- 
-s TR 
ES 
SE 
S- 
'AS 
SA 
UL T- 
-V ES 
SE 
L- 
-A MB 
AS 
SA 
DO R- 
WI 
TN 
ES 
SE 
S- 


-I 
MP 
AS 
SA 
BL 
E- 
AB 
ET 
TE 
D- 
-M AS 
SA 
CR E- 
-C 
IG 
AR 
ET 
TE 
S- 


-P 
AS 
SA 
GE 
-B ET 
TE 
R- 
AT 
TA 
CH 
-L ET 
TE 
R- 
AT 
TA 
CK 
-E IG 
HT 
TH 
RE 
E- 
AT 
TA 
IN 
-R IB 
BI 
NG 
-B AT 
TA u 
ON 
FO 
RB 
ID 
Dl 
NG 
-R AT 
TA 
N- 
-D IF 
FI 
cu 
LT 


BO 
OB 
YT 
RA P- 
-B IL 
u 
ON 


IN 
DE 
ED 
-F IL 
u 
NG 
-W EB 
BE 
D- 
-K IL 
LI 
NG 
EF 
FE 
CT 
-M IL 
LI 
ME 
TE 
R- 
EF 
FE 
CT 
IV 
E- 
-M IL 
LI 
NG 
co 
MP 
EL 
LE 
D- 
-M IL 
u 
ON 


-E 
XC 
EL 
LE 
NC. E- 
SH 
IL 
u 
NG 
-E XC 
EL 
LE 
NT 
SP 
IL 
u 
NG 
-E 
XP 
EL 
LE 
D- 
-T IL 
u 
NG 
-I 
MP 
EL 
LE 
D- 
-W IL 
u 
AM 
-P 
EL 
LE 
T- 
-W IL 
u 
NG 
PR 
OP 
EL 
LE 
D- 
IM 
MI 
GR 
AN T- 
-R EP 
EL 
LE 
D- 
IM 
MI 
GR 
AT 
10 
N- 
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Table D--:-51). List of playfair digraphic idiomorphs (U) -continued 


AB 
BA 
AB -- 
BA 


IM 
MI 
NE 
NT 
PR 
AC 
TI 
CA 
BL 
E- 


sw 
IM 
MI 
NG 
PR 
AC 
TI 
CA 
L- 
-B 
EG 
IN 
Nl 
NG 
-T AC 
TI 
CA 
L- 
SP 
IN 
Nl 
NG 
-D IV 
EB 
OM 
BE 
R- 
-W IN 
NI 
NG 
EN 
GI 
NE 
ER 


CL 
IP 
PI 
NG 
-G EN 
UI 
NE 


SH 
IP 
PI 
NG 
-1 
NT 
ER 
FE 
RE 


-S TR 
IP 
PI 
NG 
-1 
NT 
ER 
FE 
REI NC 
E- 


IR 
RI 
GA 
TI 
ON 
-P 
EN 
ET 
RA TE 


-M IS 
Sl 
NG 
-R EV 
OL 
VE 
R- 
-M IS 
Sl 
ON 
IN 
FI 
NI 
TE 


-A OM 
IS 
Sl 
ON 
-D IS 
PO 
SI 
TI 
ON 


EM 
IS 
Sl 
ON 
-S 
IT 
UA 
TI 
ON 
-H IS 
Sl 
NG 
CA 
NA 
DI 
AN 


PE 
RM IS 
Sl 
ON 
VE 
TE 
Rl 
NA 
Rl 
AN 
TR 
AN 
SM 
IS 
Sl 
ON 
NI 
NE 
TE 
EN 
EM 
IT 
TI 
NG 
NI 
NE 
TE 
EN I TH 
-F 
IT 
TI 
NG 
PE 
RC 
EP 
TI 
ON 
-S 
PL 
IT 
TI 
NG 
-P 
RE 
Ml 
ER 


PE 
RM IT 
TI 
NG 
-S 
UR 
RE 
NO 
ER 


-A FT 
ER 
NO 
ON 
--0 
UR SE 
LV 
ES 
FO 
RE 
NO 
ON 
TH 
EM 
SE 
LV 
ES 
NO 
ON TI 
ME 
DE 
SE 
RV 
ES 
-F OL 
LO 
W- 
RE 
SE 
RV 
ES 
-H OL 
LO 
W- 
SE 
RV 
ES 
-C 
OM 
MO N- 


-C OM MO TI 
ON 


PO 
SI 
TI 
ON 
NO 
RT 
HO F- 


-R EC 
ON 
NO 
IT 
ER 


OP 
PO 
RT 
UN E- 
OP 
PO 
RT 
UN IT 
Y- 
OP 
PO 
SE 
OP 
PO 
SI 
TE 


OP 
PO 
SI 
TI 
ON 
-C OR 
RO 
BO 
RA TE 


-C OR 
RO 
DE 


-T OM OR RO W- 
-B OT 
TO 
M- 


-C OT 
TO 
N- 


CA 
RE 
ER 


-S uc 
CUI MB 
ED 
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Table D-5 (~.List of playfair digraphic idiomorphs (U) -Continued 


AB -- -- 
BA 
AB -- 
-- -- 
BA 


DE 
BA 
RK ED 
DE 
SE 
CR 
AT 
ED 
DE 
CL 
AR ED. 
DE 
SI 
GN 
AT 
ED 
DE 
FE 
ND 
ED 
DE 
SP 
AT 
CH 
ED 
DE 
MA 
ND 
ED 
EN 
EM 
yp 
LA 
NE 
S- 


DE 
PA 
RT 
ED 
-D ET 
ER 
10 
RA 
TE 
DE 
PL 
OY 
ED 
-S I EV 
EN 
TY 
FI 
VE 
DE 
PO 
RT 
ED 
IR 
RE 
GU 
LA 
RI 
TY 


DE 
SE 
RT 
ED 
NO 
MI 
NA 
TI 
ON 


DE 
TA 
CH 
ED 
su 
SP 
IC 
IO 
us 


PR 
EC 
ED 
EN 
CE 


EM 
PL 
OY 
ME 
NT 
AB -- -- 
-- 
-- 
BA 
EN 
TR 
AI 
NE D- 
I DE 
ME 
AS 
UR EM 
EN T- 
MO 
NS 
TR 
AI 
ED 
NE 
GL 
IG 
EN 
CE 
I NO 
Tl 
FI 
CA 
TI 
ON 
I 
NO 
TA TI. ON 
I 
PA 
RA GR AP, H- 
RE 
CE 
IV 
ER i 


RE co 
RD 
ER 
RE 
GI 
ST 
ER 
RE 
PE 
AT 
ER 
RE 
PO 
RT 
ER 
RE 
VO 
LV 
ER 


-P 
RO JE 
CT 
OR 
AS 
SE 
MB u 
ES 


- 
~--- 
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Table D-6 (!J). List of four-square digraphic idiomorphs (U) 


(Grouped by number of significant letters in the idiomorphic pattern) 


1WOLETIERS 


A- A- 
A- A- 
A-- A- 
AD ED 
RE QU ES T 
SA BO TA 
AD ED 
RE QU IR E 
SE VE RE 
DAM AG E 
p RI SO NE R 
AC TI VI TY 


CO MM AN DS 
RE SI ST AN CE 
A TI EN TI 
I SL AN DS 
D IS PO SI TI ON 
S UC CE SS 


A IR PL AN ES 
PO SI TI ON 


GE 


ON 


FU LL Y 


E NE MY PL AN ES 
SO UT H 
A---A- 
DE SI GN AT ED 
SQ UA DR ON 
AR TI LL ER y 
E ST IM AT ED 
FI GH TE RP LANE 
AT TA CK ED 
I ND IC AT ED 
MO TO RI ZE D 
R EE NF OR CE 
C AV AL RY 
D EP AR TU RE 
R EE NF OR CE ME NT 
N AV AL 
UN US UA L 
ID EN TI FY 


P RO CE DU RE 
IN PO SS IB LE 


ME CHAN IZ ED 
A-- A- 
MO VE ME NT 
IM ME DI AT EL Y 
S AB OT AG E 
E MP LA CE NE NT 


\-IT TH DR AW 
D ET AC HM EN T 
PE RS ON NE L 
WITH DR EW 
H AS BE EN 
A RT IL LE RY 


EM ER GE NC Y 
BA 'IT AL IO N 
L IE UT EN AN T 
BO MB ED 
A----A- 
FI FT EE N. 
CA SU AL TI ES 
CO MM UN IC AT IO NS 


FI FT H 
CA SU AL TY 
CO NC EN TR AT E 
FI FT y 
CO MH AT 
R EO RG AN IZ AT ION 
BR ID GE HE AD 
CO OR DI NA TE S 
LI EU TE NA NT 
V IC IN IT Y 
DI RE CT IO N 
co NS TR UC TI ON 


WIT HD RAW 
DI SP AT CH 


A DD IT IO NA L 
ME DI UM BO MB ER 
A-- 
A 


A MM UN IT IO N 
DI VE BO MB ER 
CO MM IS SI ON ED 


CO ND IT IO N 
R OA DJ UN CT IO N 
RE CO GN IT IO N 
R EP LA CE ME NT 
-B -B 
E LE ME NT 
R ET RE AT 
UN AB LE 
MI LI TA RY 
S EV ER AL 
OB ST AC LE 
MINI MUM 
JU NC TI ON 
AD VA NC E 
NI NT H 
co NF IR MA TI ON 
AG AI NS T 


P OI NT 
I NF OR MA TI ON 
R AI LH EA D 
T OM OR ROW 
I NT EL LI GE NC E 
PR EP AR AT IO N I 
PO NT ON 
PA TR OL 
A SS AU LT 
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Table D-6 v{). List of four-square digraphic idiomorphs (D)--Continued 


1WO LEITERS -Continued 


-B -B 
-B -n 
-B- -B 


B OM BA RD 
c OL ON 
CA RR IE RS 


A IR BORN E 
C OL ON EL 
~n SS IO NS 
S EA BO RN E 
SU PE RI OR IT y 
TH En TY 
A DV AN CI NG 
M OT OR IZ ED 
R EQ UE ST ED 
VI CI NI TY 
on TS KI RT S 


DE TA CH 
EQ UI Pl>f E~ T 
-n-- -n 


DE TA CH ME NT 
AVE RAGE 
I DE NT IF IC AT IO N 
H AV EB EE N 
BAR RAGE 
M EC HA NI ZE f) 
M OV E~1 EN T 
AI RC RA FT 
D EP LO 
Y~• EN T 


lEN EM y 
AN TI AI RC RA FT 
M ES SE NG 
E~ 


R ES ER VE 
RE HA IN 
D ES TR OY ER 
R ET UR N 
R EQ UI RE HE NT 
A IR SU PP OR T 
FL AN K 
H IS SI NG 
VIIS IB IL IT y 


IFO LL ow 
P ER SO NN EL 
~fE SS 
E~i GE R 


B AG,GA GE 
ES TI HA TE DA T 
I 
~1P AS SA BL E 
HA SB EE N 
P LA TO ON 
I MP OS SI BL E 


APPRO AC,HI NG 
S UP PL Y 
A HT IA IR CR AFT 


DE BO UC HI NG 
S UP PO RT 
c OH 
1·1A HD IN G 
L AU NC HI NG 
NA VA LB AS E 
OP 
E~ AT IO N 


I MM ED IA TE LY 
F OR WA Rn 
PR IS ON ER 
IN IT IA TE 
WI Nn WA RD 
PR OC ED UR E 
F IF TH 
RE EN FO RC E 
TE RR IT OR y 
-B- -B 
TR A..'l SP OR 1-TA TI ON 


s IX TY 
c AS UA LT y 
YE ST ER nAIY 


M IS CE LL AN EO US 
p AT RO LS 


E LEVA TI ON 
B AT TL ES HI PS 


E LE VE N 
GE NE RA L 
-R--- 
-~ 


LI AI SO N 
\v IL LA TT AC K 
R EC 
0~1 !·1E :m ED 
DA MAGE 
TRA NS MI SS In N 
HE AV YL OS SE S 
MORN IN G 
R EC OG NI TI ON 
R EC OH ?1£ :m AT IO N 


u NU SU AL 
T RO OP SH IP 
C OH 
~IU ~II CA TI w· 
OB JE CT IV E 
RE GI ME NT 
R EC ON 'W IT I::R I:! G 
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Table D-6 ~· List of four-square digraphic idiomorphs (D)--Continued 


A- A- A- 


NIAV AL BA,SE 


R EQ UI SI TI ON 


ABA- -B 


HIEA DQ UA,RT ER s 
EL EV EN 


AB -B A- 


THREE LETTERS 


A- A-- A- 
I RE QU ES TE I D 


FOUR LETTERS 


A- A-- -B -B 


IRE QU IR EM ENIT 


A- -B AB 


MIOR NI NGI 
P OS TP ON E 
I 
CA NC ELI 


RE CO NN AI SS AN CE 


AB-B-A- 
l 
AD VA NC EDI 


EN EM YT AN KS 


AB-A- -B 


lSI GH TI NGI 


A- AB -B 


lAD DI TijON AL 


A- AB- -B 


ISO UT HW ESIT 


A- A- -B -B 
W1IT HD RA WA\L 


A-A--A-A- 


I co MM AN DI NG I 


A- -B -B- A- 


IRE coNN 01 TE\R 


A- -B- AB 


\IN TE RD ICIT 


A--B-A- -B 


S\AT IS FACT ORIY 


A-- A- C- C- 
\DI SPAT CH ESI 


A--- C- A- C- 
\RO AD JU NC TI ONI 


-B AB A- 
D! SP,OS IT ION 
P OS IT IO N 
PR ES EN T 


REI PR ES EN T 


-CONFIO~NTIAL _, 


-B -B -B 


B OM BA RD ME NT 
EL EM EN TS 


EN GA GE ME NT 


-B A- AH 
RE\PE AT ED I 


-B A- A- -B 


I DE ST RO YE I R 


-B A- -B -A- 


IUN ID EN TI FI\ED 


-B A-- AB 


U\NS UC CE SSIFU L 


-BA--A- -B 


jME DI UMBO MBtER 


-B A---BA- 


I VI SI BI LI TY I 


-B A--- AB 


liN FO RH AT lOIN 


-B A--- A- -B 


liN ST AL LA TI ON! 


-B -D -B - 
-D 


ICR OS SR OA DS I 
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Table D-6 CC/). List of four-square digraphic idiomorphs (D)--Continued 


FOUR LETTERS -Continued 


-B -D -D -B 
-B- A- AB 
-R - 
-R A- A- 
AI IRs UP Pn RTI 
F IG HT IER PT, AN ESI 
I EN en TN TE RE I n 


-B -D- -D-B 
-R- A--- AR 
-R - 
- 
-R _n -'n 
liN ST RU CT IniN 
E I ST AR L I SH '1<-ffi NT I 
\RF: 
I~ 'J:'() Rr E'-1' F.N IT 
C ON ST RU CT IO N 


FIVE LEITERS 


A- -B AB- -R 
-R A- A- - 
AB 
-R -n - 
-n -R _n 
INA VA LA TT ACIK 
J ni ST RI BP TI I nN 
I IN ST rnr r.T rn Ns I 


A- -B- -B AB 
-B A- -R AB 
R EC\ON NA IS SA NCIE 
RE IPT, AC EM EN IT 


~~---- 


SIX LEITERS 


AB CB "C- A- 
A- A- -R AB A- 
A- - 
CR .t..- - 
CR 
P lOS IT IO NSJ 
IRE QU IS IT IniN 
I In EN TI FI rA TIInN 


AB -D -n AB 
A- CB- A- CB 
-R AB AD -n 
c\ oN nr TI oN\ 
Q UA\RT E'R MA S'l' ERI 
A I DM PJ IS T~ I AT P' E 


RA DI OG RAM 
A- CB - 
CR A- 


lsc Hn OL Hn nslr: 


Table D-6 yt). List of four-square digraphic idiomorphs (D)--Continued 


SEVEN LEITERS 


...;.B AD - 
-B -D AD 
I 
I RE EN FO RC E:'-·1 E~ IT 
-l 


EIGHT LEITERS 


AB -B AD - 
-B AD 
AB -B C- AB CB 
AB -n C- AD C- -B 


IQU AR TE RH AS TEIR 
IEH PL AC EN E~IT 
IDT TE RD IC TI ON! 


- 
-- 
- 
L___--~----~ 
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Table D-7 )9>· List of words containing like letters repeated at various intervals (U) 


AA 
RU 
BBER 
AA 
CR 
EEK 
AA 
RU 
BBLE 
AA 
DECR 
EE 
AA 
A 
CCEPT 
AA 
DEGR 
EE 
AA 
A 
CCEPTABLE 
AA 
EIGHT 
EEN 
AA(S)A 
A 
CCEPTANCE 
AA 
EIGHT 
EENTH 
AA 
A 
CCESS 
AA 
EMPLOY 
EE 
AA 
A 
CCESSORY 
AA 
ENG IN 
EER 
AA 
A 
CCIDENTIAL 
AA 
ENG IN 
EERING 
AA 
A 
CCOMPANY 
AA 
F 
EEL 
AA 
A 
CCOMMODATION 
AA 
F 
EET 
AA(S)A 
A 
CCORDANCE 
AA 
FIFT 
EEN 
AA 
A 
CCORDING 
AA 
FIFT 
EENTH 
AA 
0 
CCUPATION 
AA 
FL 
EE 
AA 
0 
CCUPY 
AA 
FL 
EET 
AA 
su 
CCEEDED 
AA 
FOURT 
EEN 
AA 
su 
CCESS 
AA 
FOURT 
EENTH 
AA 
su 
CCESSFUL 
AA 
HASB 
EEN 
AA 
su 
CCESSFULLY 
AA 
HAVEB 
EEN 
AA 
su 
CCESSIVE 
AA 
IND 
EED 
AA 
TOBA ceo 
AA 
K 
EEP 


AA 
UNSU 
CCESSFUL 
AA(l)A 
K 
EEPER 


AA 
A 
DD 
AA 
M EET 
AA 
A 
DDITIONAL 
AA 
NINET 
EEN 
AA 
A 
DDRESSES 
AA 
NINET 
EENTH 
AA 
A 
DDRESS 
AA 
PROC 
EED 
AA(S)A 
A 
DDRESSED 
AA(l)A 
PROC 
EEDED 
AA 
BE 
DOING 
AA 
QU 
EEN 
AA 
LA 
DOER 
AA(S)A 
R 
EENFORCE 


AA 
su 
DDEN 
AA(S)A(l)A 
R 
EENFORCEMENT 


AA(l)A 
AGR 
EEMENT 
AA 
R 
EENLIST 


AA 
B 
EEN 
AA(S)A 
R 
EENLISTED 
AA(l)A 
BEENN 
EEDED 
AA(6)A 
R 
EENLISTMENT 
AA(2)AA(l)A 
B 
EENNEEDED 
AA 
REFUG 
EE 
AA(2)A 
B 
EETLE 
AA 
SCR 
EEN 
AA 
BETW 
EEN 
AA 
SCR 
EENING 
AA(l)A 
BR 
EEZE 
AA 
s EE 
AA(l)A 
CH 
EESE 
AA 
s EEN 
AA 
COFF 
EE 
AA 
SEVE NT 
EEN 
AA 
COMMAND 
EER 
AA 
SEVE NT 
EENTH 
AA 
COMMITI 
EE 
AA 
SIXT 
EEN 
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Table D-7 (cj'>. List of words containing like letters repeated at various intervals (D)-Continued 


AA 
SIXT EENTH 
AA 
SU GGEST 


AA 
SMOKESCR EEN 
AA 
TRI GGER 
AA 
SP EED 
AA 
BEAC HHEAD 
AA 
ST EEL 
AA 
ACTUA LLY 
AA 
STR EET 
AA 
A LL 
AA(l)A 
SUCC EEDED 
AA 
A LLEGE 
AA 
SW EEPING 
AA 
A LLEGIANCE 


AA 
THIRT EEN 
AA 
A LUED 


AA 
THIRT EENTH 
AA 
A LUES 


AA 
THR EE 
AA 
A LLOCATION 


AA 
W EEK 
AA 
A LLOTMENT 
AA 
WH EEL 
AA 
A LLOWANCE 


AA 
A FFAIR 
AA 
A LLOW 


AA 
CHAU FFEUR 
AA 
A LLY 
AA 
COE FFICINT 
AA 
ARTI LLERY 
AA 
CO FFEE 
AA 
BA LLISTICS 


AA 
DI FFERENCE 
AA 
BA LLOON 


AA 
DI FFERENT 
AA 
BE LLIGERENT 
AA 
DI FFICULT 
AA 
BI 
LLET 
AA 
DI FFICUL TIES 
AA 
BI LLETED 
AA 
E FFECT 
AA 
BU LLETIN 
AA 
E FFECTED 
AA 
CA LL 
AA 
E FFECTIVE 
AA 
CANCE LLATION 
AA 
E FFICACY 
AA 
CANCE LLED 
AA 
E FFICIENT 
AA 
CE LL 


· AA 
E FFICIENCY 
AA 
CHA LLENGE 
AA 
E FFORT 
AA 
co LLAPSED 


AA 
GENERALSTA FF 
AA 
co LLECT 


AA 
INE FFICIENCY 
AA 
co LLECTION 


AA 
JUMPO FF 
AA 
co LLEGE 
AA 
0 
FF 
AA 
co LLISION 


AA 
0 
FFEND 
AA 
COMPE LLED 
AA 
0 
FFENDED 
AA 
DISTI LL 
AA 
0 
FFENSE 
AA 
DO LLAR 
AA 
0 
FFENSIVE 
AA 
DRI LL 
AA 
0 
FFICE 
AA 
ENRO LL 
AA 
0 
FFICER 
AA 
ENRO LLED 
AA 
0 
FFICIAL 
AA 
ENRO LLMENT 
AA 
POSTO FFICE 
AA 
EXPE LLED 
AA 
STA FF 
AA 
FA LL 
AA 
SU FFER 
AA 
FA LUNG 


AA 
SU FFERED 
AA 
FE 
LL 
AA 
SU FFICIENT 
AA 
Fl LUNG 


AA 
TRA FFIC 
AA 
FO LLOW 


AA(l)A 
BA GGAGE 
AA 
FU LL 
AA 
FO GGY 
AA 
HI 
LL 
AA 
STRA GGLER 
AA 
I LL 
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Table D-7 ~).List of words containing like letters repeated at various intervals (D)-continued 


AA(3)A 
I 
LLEGAL 
AA 
co 
MMANDANT 
AA 
I 
LUTERATE 
AA 
co 
MMANDED 
AA 
I 
LLNESS 
AA 
co 
MMANDEER 
AA 
I 
LLUMINATE 
AA 
co 
MMANDER 
AA 
I 
LLUMINATING 
AA 
co 
MMANDING 
AA 
I 
LLUMINA TION 
AA 
co 
MMENCE 


AA 
I 
LLUSTRATE 
AA(4)A 
co 
MMENCEMENT 


AA 
I 
LLUSTRATION 
AA 
co 
MMEND 
AA 
INSTA 
LL 
AA 
co 
MMENDATION 


AA 
INSTA 
LLATIONS 
AA 
co 
MMENT 
AA 
INTE 
LUGENCE 
AA 
co 
MMERCE 


AA 
INTE 
LUGENT 
AA 
co 
MMISSARY 


AA 
Kl . LLED 
AA 
co 
MMISSION 


AA 
Kl 
LUNG 
AA 
co 
MMISSIONER 


AA 
MI 
LUMETER 
AA 
co 
MMIT 
AA 
MISCE 
LLANEOUS 
AA(2)A 
co 
MMITMENT 
AA 
OSCI 
LLATE 
AA 
co 
MMITTEE 
AA 
PARA 
LLAX 
AA 
co 
MMON 


AA(l)A 
PARA 
LLEL 
AA 
co 
MMUNICATE 


AA 
PATRO 
LUNG 
AA 
co 
MMUNICATION 


AA 
PAYRO 
LL 
AA 
co 
MMUNIQUE 
AA 
RA 
LLY 
AA 
co 
MMUTE 


AA 
REBE 
LUON 
AA 
HA 
MMER 
AA 
REF I 
LL 
AA 
I 
MMEDIATE 
AA 
REFI 
LUNG 
AA 
I 
MMIGRATION 


AA 
REPE 
LLED 
M 
INFLA 
MMABLE 
AA 
RESPECTFU 
LLY 
AA 
RECO 
MMEND 
AA 
SHE 
LL 
AA 
RECO 
MMENDATION 


AA 
SHE 
LLED 
A). 
RECO 
MMENDED 
AA 
SHE 
LLFIRE 
AA 
su 
MMARY 


AA 
SHE 
LUNG 
AA 
su 
MMER 
AA 
SHE 
LLS 
AA 
su 
MMIT 
AA 
SIGNA 
.LUNG 
AA 
su 
MMON 


AA 
SMA 
LL 
AA 
SWI 
MMING 
AA 
SPE 
LL 
AA 
A 
NNEX 
AA 
SUCCESSFU 
LLY 
AA 
A 
NNOUNCE 


AA 
VA 
LLEY 
AA(2)A(4)A 
A 
NNOUNCEMENT 


AA 
VI 
LLAGE 
AA 
A 
NNUAL 


AA 
WE 
LL 
AA 
ANTE 
NNA 
AA 
WI 
LL 
AA 
BA 
NNER 
AA 
WI 
LLATTACK 
AA 
BEE 
NNEEDED 
AA 
WI 
LUAM 
AA(l)A 
BEGI 
NNING 
AA 
ACCO 
MMODATION 
AA 
CA 
NNOT 


AA 
A 
MMETER 
AA 
CHA 
NNEL 
AA 
A 
MMUNITION 
AA(4)A 
co 
NNECTING 


AA 
co 
MMA 
AA(S)A 
co 
NNECTION 


AA 
co 
MMAND 
AA 
GU 
NNER 
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Table D-7 ~List of words containing like letters repeated at various intervals (U)..Cont inue d 


AA 
MA 
NNER 
AA 
A 
PPARATUS 


AA(I)A 
MA 
NNING 
AA 
A 
PPARENT 


AA 
PERSO 
NNEL 
AA 
A 
PPARENTLY 


AA(l)A 
PLA 
.NNING 
AA 
A 
PPEAR 


AA(S)A 
RECO 
NNAISSANCE 
AA 
A 
PPEARANCE 


AA 
RECO 
NNOITER 
AA 
A 
PPEARED 


AA(6)A 
RECO 
NNOITERING 
AA 
A 
PPLICATION 


AA 
RU 
NNER 
AA 
A 
PPLY 


AA(l)A 
RU 
NNING 
AA 
A 
PPOINT 


AA 
TO 
NNAGE 
AA 
A 
PPOINTED 


AA 
AFT ERN 
OON 
AA 
A 
PPOINTMENT 


AA 
ASS 
OONAS 
AA 
A 
PPROACH 


AA 
BALL 
OON 
AA(2)A 
A 
PPROPRIATE 


AA 
B 
OOK 
AA 
A 
PPROVAL 


AA 
B 
OOTH 
AA 
A 
PPROVE 


AA 
CO DEB 
OOK 
AA 
A 
PPROXIMATE 


AA 
c 
OOK 
AA 
CLI 
PPER 


AA 
c 
OOPERATE 
AA 
DIS A 
PPEAR 


AA(6)A 
c 
OOPERATION 
AA 
DISA 
PPEARANCE 


AA 
c 
OORDINATE 
AA 
DIS A 
PPEARED 


AA(7)A 
c 
OORDINATION 
AA 
DRO 
PPED 


AA(2)A 
F 
OOTHOW 
AA 
HA 
PPEN 


AA 
FOREN 
OON 
AA 
MA 
PPING 


AA 
H 
OOK 
AA 
0 
PPOSE 


AA 
L 
OOK 
AA 
0 
PPOSITE 


AA(l)A 
L 
OOKOUT 
AA 
0 
PPOSITION 


AA 
N 
OON 
AA 
PHILI 
PPINES 


AA 
PLAT 
OON 
AA 
REA 
PPOINTED 


AA 
PONT 
OON 
AA 
REA 
PPOINTMENT 


AA 
PR 
OOF 
AA 
SHI 
PPING 


AA 
SCH 
OOL 
AA 
STO 
PPED 


AA(2)A 
SCH 
OOLHOUSE 
AA 
su 
PPLIES 


AA 
SHARPSH 
OOTER 
AA 
su 
PPLY 


AA 
s 
OON 
AA 
su 
PPORT 


AA 
SP 
OOLS 
AA 
su 
PPORTING 


AA 
SP 
OONS 
AA 
su 
PPOSE 


AA 
TATT 
00 
AA 
A 
RRANGE 
AA 
T 
00 
AA 
A 
RRANGEMENT 
AA 
T 
OOK 
AA 
A 
RREST 
AA 
T 
OOL 
AA 
A 
RESTED 
AA 
TR 
OOPS 
AA 
A 
RRIVAL 
AA 
TR 
OOPSHIP 
AA 
A 
RRIVE 
AA 
TR 
OOPSHIPS 
AA 
BA 
RRACKS 


AA 
UNDERST 
OOD 
AA 
BA 
RRAGE 
AA 
w 
OODED 
AA 
CA 
RRIAGE 
AA 
w 
OODS 
AA(2)A 
CA 
RRIER 
AA 
AIRSU 
PPORT 
AA 
CA 
RRY 
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Table D-7 C9). List of words containing like letters repeated at various intervals (U) -Continued 


AA 
CON FE 
RRED 
AA 
A 
SSEMBLE 


AA 
CO 
RRECT 
AA 
A SSEMBLY 


AA 
co 
RRECTED 
AA(6)A 
A SSEMBLIES 


AA 
co 
RRECTION 
AA( 1 )AA( 4 )A 
A SSESSMENTS 


AA 
co 
RRECTNESS 
AA(4)A 
ASSE 
SSMENTS 


AA 
co 
RRESPONDENCE 
AA 
A SSET 


AA 
co 
RRESPONDING 
AA(2)A 
A SSETS 


AA(3)A 
co 
RRIDOR 
AA 
A SSIGNED 


AA 
CU 
RRENT 
AA 
A SSIGNMENT 


AA 
DEFE 
RRED 
AA(7)A 
A SSIGNMENTS 


AA 
DE 
RRICK 
AA(I)A 
A SSIST 


AA(l)A 
E 
RROR 
AA(I)A 
A SSISTANT 


AA 
FE RRY 
AA(I)A 
A SSISTANCE 


AA 
GA 
RRISON 
AA 
A SSOCIATE 


AA 
HU 
RRICANE 
AA 
A SSOCIATION 


AA 
INTE 
RRUPT 
AA(4)A 
A SSOONAS 


AA 
INTE 
RRUPTED 
AA 
A SSURANCE 


AA 
INTE 
RRUPTION 
AA 
A SSURE 
AA(.S)A 
I 
RREGULAR 
AA 
BUSINE 
SS 


AA(S)A 
I 
RREGULARITIES 
AA 
CARELE SS 


AA(S)A 
I 
RREGULARITY 
AA(2)AA 
CARELE 
SSNESS 


AA 
I 
RRIGATION 
AA 
CARELESSNE SS 


AA(l)A 
MI 
RROR 
AA(l)A 
CHA SSIS 


AA 
PREA 
RRANGED 
AA 
CLA SSIFICATION 


AA 
PRE FE 
RRED 
AA 
COMMI 
SSARY 


AA(4)A 
SU 
RRENDER · 
AA 
COMMI 
SSION 


AA(4)A 
SU 
RRENDERED 
AA 
COMMI 
SSIONER 


AA 
SU 
RROUND 
AA 
COMPA 
SS 


AA 
TE 
RRAIN 
AA 
COMPLETENE SS 


AA 
TE 
RRIBLE 
AA 
COMPRE 
SSED 


AA 
TE 
RRIFIC 
AA 
CONCE 
SSION 


AA(3)A 
TE 
RRITORY 
AA 
CONFE 
SSION 


AA(I)A 
TE 
RROR 
AA 
CONGRE 
SS 


AA 
TOMO 
RROW 
AA 
CONGRE 
SSIONAL 


AA 
TRANS FE 
RRED 
AA 
CORRECTNE SS 


AA 
TRANS FE 
RRING 
AA 
CRO 
SS 


AA 
TU RRET 
AA 
CRO SSING 


AA 
ACCE ss 
AA(4)A 
CRO 
SSROADS 


AA 
ACCE 
SSORY 
AA 
DARKNE 
SS 


AA 
ACRO ss 
AA 
DEPRE SSION 


AA 
ADDRE 
SSED 
AA 
DISCU SS 


AA 
ADDRE 
SS 
AA 
DISCU SSED 


AA(l)A 
ADDRE SSES 
AA 
DISCU SSION 


AA 
ADMI 
SSION 
AA 
DISMI 
SS 


AA 
AMBA 
SSADOR 
AA 
DISMI 
SSAL 


AA 
ASPO 
SSIBLE 
AA 
DI 
SSEMINATED 


AA 
A 
SSAULT 
AA 
DI 
SSEMINA TION 
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Table D-7 f)· list of words containing like letters repeated at various intervals (U) -Continued 


AA 
DISTRE SS 
AA(l)AA 
PO 
SSESSION 


AA 
DISTRE SSED 
AA 
PO 
SSIBLE 


AA 
DRE 
SS 
AA 
PREPAREDNE ss 


AA 
DRE; 
SSING 
AA 
PRE ss 


AA(2)A 
EMBA 
SSIES 
AA 
PRE 
SSED 


AA 
EMBA 
SSY 
AA 
PRE SSURE 


AA 
EXCE 
SS 
AA 
PROGRE 
SSIVE 


AA 
EXCE 
SSIVE 
AA 
PROGRE ss 


AA 
EXPRE 
SS 
AA 
READINE ss 


AA 
FORTRE SS 
AA 
RECONNAI 
SSANCE 


AA 
GA SSING 
AA 
REDCRO ss 


AA(l)A 
GLA SSES 
AA 
SE 
SSION 


AA(l)A 
HEA VYLO 
SSES 
AA 
STRE ss 


AA 
ILLNE 
SS 
AA 
SUBMI 
SSION 


AA 
IMPA 
SSABLE 
AA 
SUCCE ss 


AA 
IMPO 
SSIBLE 
AA 
SUCCE 
SSFUL 


AA 
IMPRE 
SSED 
AA 
SUCCE 
SSFULLY 


AA 
IMPRE 
SSION 
AA 
SUCCE 
SSIVE 


AA 
IMPRE 
SSIVE 
AA 
TRANSMI 
SSION 


AA 
I SSUE 
AA 
UNLE ss 


AA(2)A 
I SSUES 
AA 
UNSUCCE 
SSFUL 


AA 
I SSUING 
AA 
USELE ss 


AA 
LE SS 
AA 
VE 
SSEL 


AA 
LE 
SSON 
AA(2)A 
VE 
SSELS 


AA 
LO 
SS 
AA 
WIRELE ss 


AA(l)A 
LO 
SSES 
AA 
WITNE ss 


AA 
MA 
SS 
AA(l)A 
WITNE 
SSES 


AA 
ME 
SS 
AA 
A 
TTACH 


AA 
ME 
SSAGE 
AA(6)A 
A TTACHMENT 


AA(3)A 
ME 
SSAGES 
AA 
A TIACK 


AA 
ME 
SSENGER 
AA 
A TIAIN 


AA 
ME 
SSING 
AA(6)A 
A TIAINMENT 


AA 
MI 
SSING 
AA(3)A 
A TTEMPT 


AA 
MI 
SSION 
AA(3)A 
A TTEMPTED 


AA(3)A 
MI 
SSIONS 
AA(2)A 
A 
TTENTION 


AA 
NECE SSARY 
AA 
BA 
TIAUON 


AA 
NECE SSITY 
AA 
BA 
TIEN 


AA 
NECE SSITATE 
AA 
BA 
TIERED 


AA 
PA SS 
AA 
BA TIERIES 


AA 
PA SSAGE 
AA 
BA 
TIERY 


AA 
PA SSED 
AA 
BA TILE 


AA 
PA SSENGER 
I AA 
BA TILEFIELD 


AA(l)A 
PA SSES 
I 
AA 
BA 
TTLESHIP 


I 


AA 
PA SSIVE 
I AA 
BE TIER 


AA 
PA SSPORT 
I~ 


BI 
TTER 


AA 
PERMI 
SSION 
BO 
TIOM 


AA 
POSSE SSION 
BOY CO 
TT 
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TableD-~- List of words containing like letters repeated at various intervals (U) -Continued 


AA 
CIGARE ITE 
A-A 
COMB ATANT 
AA 
COMMI TTEE 
A-A 
CONTR ABAND 
AA 
COUNTERA IT ACK 
A-A 
D AMAGE 
AA 
Fl 'ITING 
A-A 
D AMAGED 
AA 
GE TTING 
A-A 
D AMAGING 
AA 
LE ITER 
A-A 
DISAPPE ARANCE 


AA 
LE TIERED 
A-A 
EXC AVATE 


AA 
LI ITER 
A-A 
EXC AVATION 


AA 
LI TTLE 
A-A 
EXPL ANATION 


AA 
NA VALA IT ACK 
A-A 
F ATAL 
AA 
NAY ALBA TTLE 
A-A 
F ATALITY 


AA 
OMI TTED · 
A-A 
FIRE ALARM 
AA 
SE TTLE 
A-A 
G ARAGE 
AA 
SPO ITING 
A-A(I)A 
GENER ALALARM 
AA 
SUBMI TTED 
A-A 
GENERAL ALARM 
AA 
TA ITOO 
A-A 
J APAN 
AA 
THA TTHE 
A-A 
M ANAGE 
AA 
WILLA TTACK 
A-A 
M ANAGEMENT 
AA 
WRI ITEN 
A-A 
N AVAL 


AA 
MU ZZLE 
A-A(I)A(2)A 
N AVALATTACK 


AA 
NO ZZLE 
A-A(2)A 
NAY ALATTACK 


A-A 
ABANDON 
A-A(2)A 
N AVALBASE 


A-A 
AGAIN 
A-A(2)A 
N AVALBA TTLE 
A-A 
AGAINST 
A-A 
N A V ALFORCES 


A-A 
ALARM 
A-A 
NONCOMB ATANT 
A-A(2)A 
ALASKA 
A-A(l)A 
P ANAMA 
A-A 
ALM ANAC 
A-A 
PAN AMA 
A-A 
ANALYSIS 
A-A 
P ARACHUTE 


A-A 
ANALYZE 
A-A 
P ARADE 
A-A 
APP ARATUS 
A-A(2)A 
P ARAGRAPH 
A-A 
APPE ARANCE 
A-A(2)A 
P ARALLAX 
A-A(2)A 
ARABIA 
A-A 
P ARALLEL 
A-A(2)A 
AVAILABLE 
A-A 
PREP ARATION 


A-A 
AWAIT 
A-A 
PROCL AMA TION 


A-A 
AWARD 
II A-A 
QU ARANTINE 
A-A 
AWAY 
I A-A 
S ALARY 


A-A 
C ALAMITY 
I A-A 
SEP ARATE 
A-A(l)A 
C ANADA 
,j A-A 
SEP ARATION 


A-A 
CAN ADA 
,, A-A 
T AXATION 


A-A 
C ANAL 
A-A 
V ACANCY 


A-A 
C APABILITY 
A-A 
WITHDR AWAL 
A-A 
C APACITY 
A-A 
PRO BABLE 


A-A· 
C AT ASTROPHE 
A-A 
PRO BABLY 


A-A 
C AVALRY 
A-A 
BI CYCLE 


A-A 
CH ARACTER 
A-A 
CYCLONE 


A-A 
CH ARACTERISTIC 
A-A 
EFFI CACY 


A-A 
CLE ARANCE 
A-A 
MOTOR CYCLE 
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Table D-7 (t). List of words containing like letters repeated at various intervals (U) -Continued 


A-A 
BEENNEE 
DED 
A-A 
COLL 
EGE 
A-A 
BLOCKA 
DED 
A-A 
COMMENC 
EMENT 
A-A 
BOMBAR 
DED 
A-A 
COMPL 
ETELY 


A-A 
COMMAN. DED 
A-A 
COMPL 
ETE 
A-A 
DEC I 
DED 
A-A 
COMPLET 
ENESS 


A-A 
DEDICATE 
A-A(l)A 
COMPL 
ETENESS 


A-A 
DEDICATION 
A-A 
CO NCR 
ETE 
A-A 
DEFEN 
DED 
A-A(2)A 
CONF 
ERENCE 


A-A 
DEMAN 
DED 
A-A 
CONFIN 
EMENT 
A-A 
ENCO 
DED 
A-A 
CONQU 
ERED 
A-A 
EXPAN 
DED 
A-A 
COY 
ERED 
A-A 
EXPEN 
DED 
A-A 
CR 
EDENTIAL 
A-A 
EXT EN 
DED 
A-A(2)A 
D 
ECEMBER 


A-A 
GROUN 
DED 
A-A(7)A 
D 
ECENTRALIZE 


A-A 
GUAR 
DED 
A-A(7)A 
D 
ECENTRALIZED 


A-A 
INVA 
DED 
A-A 
DECIPH 
ERED 
A-A 
LAN 
DED 
A-A 
D 
EFEAT 
A-A 
OFFEN 
DED 
A-A(2)A 
D 
EFEATED 
A-A 
PROCEE 
DED 
A-A 
D 
EFECT 


A-A 
RAI 
DED 
A-A(4)A 
D 
EFECTIVE 


A-A 
RECOMMEN 
DED 
A-A 
D 
EFEND 
A-A 
SUCCEE 
DED 
A-A(2)A 
D 
EFENDER 
A-A 
SUSPEN 
DED 
A-A(2)A 
D 
EFENDED 
A-A 
UNEXPEN 
DED 
A-A(2)A 
D 
EFENSE 


A-A 
woo 
DED 
A-A(4)A 
D 
EFENSIVE 


A-A 
WOUN 
DED 
A-A 
D 
EFER 
A-A 
DID 
A-A(2)A 
D 
EFERRED 
A-A 
AGRE 
EMENT 
A-A 
D 
EPEND 


A-A 
ALL 
EGE 
A-A 
D 
EPENDABILITY 
A-A 
AMM 
ETER 
A-A(S)A 
D 
EPENDABLE 
A-A 
AMUS 
EMENT 
A-A(2)A 
D 
EPENDENT 
A-A 
ANNOUNC 
EMENT 
A-A 
D 
ESERT 


A-A 
ARRANG 
EMENT 
A-A(2)A 
D 
ESERTED 


A-A 
BAROM 
ETER 
A-A(2)A 
D 
ESERTER 


A-A 
BATT 
ERED 
A-A 
D 
ETECTOR 


A-A 
BEENNE 
EDED 
A-A 
D 
ETENTION 


A-A 
BELLIG 
ERENT 
A-A(6)A 
D 
ETERIORATE 


A-A 
BESI 
EGED 
A-A 
D 
ETERMINA TION 


A-A 
BILL 
ETED 
A-A(4)A 
D 
ETERMINE 
A-A 
BRE 
EZE 
A-A(4)A 
D 
ETERMINED 
A-A 
BRIDG 
EHEAD 
A-A 
D 
EVE LOP 


A-A 
CAR 
ELESS 
A-A(3)A 
D 
EVE LOPED 


A-A(3)A 
CAR 
ELESSNESS 
A-A(4)A 
D 
EVELOPMENT 


A-A 
CEM 
ETERY 
A-A 
DIFF 
ERE NT 
A-A(l)A 
c 
EMETERY 
A-A(2)A 
DIFF 
ERENCE 


A-A 
CENT 
ERED 
A-:A· 
DISPLAC 
EMENT 
A-A 
CHE 
ESE 
A-A 
DYNAMOM 
ETER 
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Table D-7 (cj). List ofwords containing like letters repeated at various intervals (U) -Continued 


A-A 
ELECTRICITY 
A-A(2)A 
INTERF 
ERENCE 


A-A 
EL 
EMENT 
A-A 
INTERPR 
ETER 
A-A 
EL 
EMENTARY 
A-A 
INTERV 
ENE 
A-A(l)A 
.ELEMENT 
A-A 
KE 
EPER 


A-A(l)A 
ELEMENTARY 
A-A 
KILOM 
ETER 
A-A(3)A 
ELEVATE 
A-A 
LETT 
ERED 
A-A 
ELEVATION 
A-A 
L 
EVEL 
A-A(l)A 
ELEVEN 
A-A 
MANAG 
EMENT 
A-A 
EL 
EVEN 
A-A 
MANGAN 
ESE 


A-A 
ELSEWH 
ERE 
A-A 
MEASUR 
EMENT 
A-A(2)A 
EMERGENCY 
A-A 
MEASUR 
EMENTS 


A-A 
EMPLAC 
EMENT 
A-A 
M 
ETEOROLOGICAL 


A-A 
ENCIPH 
ERED 
A-A 
M 
ETER 
A-A 
EN COUNT 
ERED 
A-A 
MILUM 
ETER 
A-A(2)A 
ENEMIES 
A-A 
MOV 
EMENT 
A-A 
ENEMY 
A-A 
N 
ECESSARY 


A-A(6)A 
ENEMYPLANES 
A-A 
N 
ECESSITY 


A-A 
ENEMYTANKS 
A-A(6)A 
N 
ECESSITATE 


A-A 
ENFORC 
EMENT 
A-AA 
NIN 
ETEEN 
A-A 
EN GAG 
EMENT 
A-AA 
NIN 
ETEENTH 
A-A 
ENTANGL 
EMENT 
A-A 
OBSOL 
ETE 
A-A 
EVERY 
A-A 
ORD 
ERED 
A-A 
EX CIT 
EMENT 
A-A 
PARENTH 
ESES 


A-A(S)A 
EXECUTIVE 
A-A 
p 
ENETRATION 
A-A(4)A 
EXERCISE 
A-A(4)A 
p 
ENETRATE 
A-A 
EXTR 
EME 
k-A 
p 
ETER 
A-A 
EYE 
A-A 
PLAC 
EMENT 
A-A 
F 
EDERAL 
A-A 
PREC 
EDE 
A-A 
G 
ENERAL 
A-A(I)A 
PR 
ECEDE 


A-A 
G 
ENERALALARM 
A-A(2)A 
PREC 
EDENCE 


A-A 
G 
ENERALST AFF 
A-A(I)A(2)A 
PR 
ECEDENCE 


A-A 
GONIOM 
ETER 
A-A 
PR 
ECEDING 


A-A 
GYROM 
ETER 
A-A 
PR 
EFER 
A-AA 
HAY 
EBEEN 
A-A(2)A 
PREF 
ERENCE 


A-A 
H 
ERE 
A-A(I)A(2)A 
PR 
EFERENCE 


A-A 
HIND 
ERED 
A-A(2)A 
PR 
EFERRED 
A-A 
HYDROM 
ETER 
A-A 
PR 
ESE NT 
A-A 
HYGROM 
ETER 
A-A 
PR 
ESERVATION 


A-A 
IC 
EBERG 
A-A(2)A 
PR 
ESERVE 


A-A 
IMP ROY 
EMENT 
A-A 
PROCE 
EDED 
A-A(2)A 
INCOMP 
ETENCE 
A-A 
PSYCHROM 
ETER 
A-A 
INCOMP 
ETENT 
A-A 
R 
EBELLION 
A-A(2)A 
IND 
EI>ENDENT 
A-A 
R 
ECEIPT 


A-A(6)A 
IND 
ETERMINATE 
A-A(2)A 
R 
ECEIVE 


A-A 
INT 
EREST 
A-A(2)A 
R 
ECEIVER 


A-A 
INT 
ERESTING 
A-A 
R 
ECEIVING 


A-A 
INTERF 
ERE 
A-A(S)A 
R 
ECEPTACLE 
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Table D-71J>. List of words containing like letters repeated at various intervals (U) -Continued 


A-A 
REENFORC 
EMENT 
A-A 
SUCCE 
EDED 
A-A 
R 
EFER 
A-A 
SUFF 
ERED 
A-A(2)A 
REF 
ERENCE 
A-A 
SURREND 
ERED 
A-A{l)A{2)A 
R 
EFERENCE 
A-A 
T 
ELEGRAM 
A-A 
REIMBURS 
EMENT 
A-A(4)A 
T 
ELEPHONE 


A-A 
REINFORC 
EMENT 
A-A 
TH 
ERE 
A-A 
REINSTAT 
EMENT 
A-A{3)A 
TH 
EREFORE 
A-A 
R 
EJECT 
A-A 
THERMOM 
ETER 
A-A(2)A 
R 
EJECTED 
A-A 
TH 
ESE 


A-A 
R 
EJECTOR 
A-A 
THREAT 
ENED 
A-A(2)A 
R 
ELEASE. 
A-A 
us 
ELESS 


A-A 
RELI 
EVE 
A-A 
v 
ETERINARIAN 
A-A(2)A 
R 
EMEDIES 
A-A 
w 
ERE 
A-A 
R 
EMEDY 
A-A 
WH 
ERE 
A-A(2)A 
R 
EMEMBER 
A-A 
WIR 
ELESS 


A-A(2)A 
R 
EPEATED 
A-A 
FIFTEEN 
A-A(2)A 
R 
EPEATER 
A-A 
FIFTEENTH 
A-A 
R 
EPEL 
A-A 
FIFTH 
A-A(2)A 
R 
EPELLED 
A-A 
FIFTY 
A-A 
REP LAC 
EMENT 
A-A 
BAG 
GAGE 
A-A 
REPR 
ESENT 
A-A 
EN 
GAGE 
A-A 
REPR 
ESENTATION 
A-A 
EN 
GAGEMENT 
A-A(6)A 
REPR 
ESENTATIVE 
A-A{2)A 
EN 
GAGING 
A-A 
REQUIR 
EMENT 
A-A 
EIG 
HTH 
A-A 
R 
ESEARCH 
A-A 
WIT 
HTHE 
A-A 
R 
ESERVATION 
A-A 
ACT 
IVITY 
A-A(2)A 
R 
ESERVE 
A-A 
ACTIV 
ITIES 


A-A 
R 
ETENTION 
A-A{l)A 
ACT 
IVITIES 


A-A(2)A 
R 
EVENUE 
A-A 
ADD 
ITIONAL 
A-A(2)A 
R 
EVERSE 
A-A(S)A 
ADM 
INISTRA TIVE 
A-A 
REVI 
EWED 
A-A(S)A 
ADM 
INISTRATION 


A-A 
SCH 
EME 
A-A 
·ADV 
ISING 


A-A 
SEAL 
EVEL 
A-A 
AMMUN 
ITION 


A-A 
s ELECT 
A-A 
ANT 
I AIRCRAFT 
A-A(2)A 
s ELECTED 
A-A 
ANT 
ICIPATE 


A-A 
s 
EVEN 
A-A{3)A 
ANT 
ICIPATION 


A-A(2)AA 
s EVENTEEN 
A-A 
ARTIF 
ICIAL 
A-A(2)AA 
s EVENTEENTH 
A-A(l)A 
ART 
IFICIAL 
A-A 
s 
EVENTH 
A-A 
AUDIB 
ILITY 
A-A 
s EVENTY 
A-A(l)A 
AUD 
IBILITY 
A-A(6)A 
s EVENTYFIVE 
A-A 
CAPAB 
ILITY 
A-A 
s 
EVERAL 
A-A 
CERT 
IFICATE 
A-A 
SEV 
ERE 
A-A 
CIV 
ILl AN 
A-A(l)A 
s EVERE 
A-A(l)A 
c 
IVILIAN 
A-A 
SI 
EGE 
A-A(3)A 
CLASS 
IFICATION 
A-A 
SPH 
ERE 
A-A 
COAL 
ITION 


A-A 
STAT 
EMENT 
A-A 
COEFF 
ICIENT 
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Table D-7 ((/).List of words containing like letters repeated at various intervals (U) -Continued 


A-A 
COLL 
lSI ON 
A-A 
FACIL 
I TIES 


A-A 
COLL 
ISIONS 
A-A(I)A 
FAC 
IUTIES 


A-A 
COMPET 
ITION 
A-A 
F 
I LING 
A-A 
COMPOS 
"ITION 
A-A 
F 
INISH 


A-A(2)A 
CONC 
ILlATION 
A-A 
F 
IRING 
A-A 
COND 
IT ION 
A-A 
FORT 
I FlED 
A-A 
CR 
ISIS 
A-A 
HOST 
ILITY 


A-A 
CR 
ITIC 
A-A 
HOSTIL 
ITIES 


A-A 
CR 
ITICAL 
A-A(l)A 
HOST 
IUTIES 


A-A 
CRIT 
ICISE 
A-A(3)A 
IDE NT 
IFICATION 


A-A 
CRIT 
ICISM 
A-A 
IGN 
ITION 


A-A(l)A 
CR 
ITICISE 
A-A 
INCL 
INING 
A-A(l)A 
CR 
ITICISM 
A-A 
IND 
!VIDUAL 


A-A 
CR 
IT I QUE 
A-A 
INEFF 
ICIENCY 


A-A 
DEC 
ISION 
A-A 
IN 
ITIAL 
A-A 
DEF 
ICIENCY 
A-A(l)A 
INITIAL 
A-A 
DEF 
ICIENT 
A-A 
IN 
ITIATE 
A-A 
DEF 
INITE 
A-A(I)A 
INITIATE 
A-A 
DEFIN 
IT ION 
A-A 
IRREGULAR 
ITIES 


A-A(l)A 
DEF 
INITION 
A-A 
LIAB 
IUTY 


A-A 
DEMOB 
ILIZE 
A-A 
L 
IAISON 


A-A(3)A 
DEMOB 
ILIZATION 
A-A 
L 
IMIT 
A-A 
DEPENDAB 
ILITY 
A-A(3)A 
L 
IMITATION 


A-A 
DETRA 
INING 
A-A(l)A 
L 
IMITING 
A-A 
DIET 
IT IAN 
A-A 
UM 
ITING 
A-A 
DIM 
INISH 
A-A 
L 
INING 
A-A(l)A 
D 
!MINISH 
A-A 
MAR 
ITIME 
A-A 
DIR 
IGIBLE 
A-A 
MED 
I CINE 
A-A(l)A 
D 
IRIGIBLE 
A-A 
M 
IUTARY 


A-A 
D 
ISINFECT 
A-A(l)A 
M 
IUTIA 


A-A 
D 
ISINFECTED 
A-A 
MIL 
ITIA 
A-A 
DISPOS 
IT ION 
A-A 
M 
INIMUM 
A-A 
D 
IVIDE 
A-A 
M 
INING 
A-A 
DIV 
IDING 
A-A(3)A 
MOB 
IUZATION 


A-A(l)A 
D 
IVIDING 
A-A 
MOB 
IUZE 


A-A 
DIY 
lSI ON 
A-A 
MUN 
ITIONS 


A-A(l)A 
D 
!VISION 
A-A 
OBTA 
INING 
A-A 
EFF 
ICIENT 
A-A 
OFF 
ICIAL 
A-A 
EFF 
ICIENCY 
A-A 
OP 
INION 


A-A 
ELECTR 
I CITY 
A-A 
OPPOS 
ITION 


A-A 
EL 
IGIBLE 
A-A 
PAC 
IFIC 


A-A 
ENTERPR 
ISING 
A-A 
PART 
ITION 


A-A 
EXH 
IBITED 
A-A(2)A 
PH 
IUPPINES 


A-A 
EXHffi 
ITION 
A-A 
POL 
ITICAL 


A-A(l)A 
EXH 
IBITION 
A-A 
POL 
ITICS 


A-A 
EXPED 
ITING 
A-A 
POS 
ITION 


A-A 
EXPED 
ITION 
A-A 
POS 
ITIONS 
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Table D-7 (¢). List of words containing like letters repeated at various intervals (U) -continued 


A-A 
POS 
ITIVE 
A-A(l)A 
VIS 
IBILITY 


A-A 
PRA 
IRIE 
A-A(l)A(l)A 
v 
ISIBILITY 


A-A(3)A 
PREL 
IMINARIES 
A-A 
v 
ISIBLE 


A-A 
PREL 
IMINARY 
A-A 
v 
ISIT 


A-A 
PROH 
IBIT 
A-A 
v 
ISITOR 


A-A 
PROV 
lSI ON 
A-A 
v 
ISITS 


A-A 
PROV 
ISIONS 
A-A 
w 
IRING 
A-A 
PROX 
IMITY 
A-A 
GENERA 
LALARM 
A-A(3)A 
QUAL 
IFICATION 
A-A 
PARAL 
LEL 
A-A 
RA 
IDING 
A-A 
AR 
MAMENT 
A-A 
RA 
INING 
A-A 
DYNA 
MOMETER 


A-A 
RECE 
MNG 
A-A 
MAXI 
MUM 


A-A 
RECOGN 
ITION 
A-A 
MEMBER 
A-A 
RECRU 
ITING 
A-A 
MEMORANDA 


A-A 
REMA 
INING 
A-A(6)A 
MEMORANDUM 


A-A 
REQU 
IRING 
A-A 
MEMORIAL 


A-A(l)A 
REQU 
ISITION 
A-A 
MINI 
MUM 


A-A 
REQUIS 
ITION 
A-A 
RE 
MEMBER 
A-A(l)A 
RESPONS 
IBIUTY 
A-A 
THER 
MOMETER 


A-A 
RESPONSIB 
ILITY 
A-A 
A 
NONYMOUS 


A-A 
RET 
IRING 
A-A 
BEGIN 
NING 
A-A 
R 
IDING 
A-A 
CONCER 
NING 
A-A 
R 
IGID 
A-A 
CONTI 
NENTAL 
A-A 
SEMIR 
IGID 
A-A 
DETRAI 
NING 
A-A(l)A 
SEM 
I RIGID 
A-A 
DOMI 
NANCE 


A-A 
SERV 
ICING 
A-A· 
DOMI 
NANT 
A-A 
SIGN 
IFICANT 
A-A 
INCU 
NING 
A-A 
SIGN 
IFICANCE 
A-A 
INTERVE 
NING 
A-A 
s 
!MILAR 
A-A 
UEUTE 
NANT 
A-A(3)A 
s 
IMILARITY 
A-A 
LI 
NING 
A-A 
SPEC 
IFIC 
A-A 
MAINTE 
NANCE 


A-A(3)A 
SPEC 
IFICATION 
A-A 
MAN 
NING 
A-A 
SUFF 
ICIENT 
A-A 
MI 
NING 
A-A 
SUITAB 
ILITY 
A-A 
MOR 
NING 
A-A 
SUSP 
I CION 
A-A 
NAN 
A-A 
SUSP 
ICIONS 
A-A 
NINE 
A-A 
SUSP 
ICIOUS 
A-A(4)A 
NINETEEN 
A-A 
TERR 
IFIC 
A-A(4)A 
NINETEENTH 
A-A 
TRAD 
ITIONAL 
A-A 
NINETY 


A-A 
TRA 
INING 
A-A 
NINTH 
A-A 
TRANSPAC 
IFIC 
A-A(7)A 
NONCOMBATANT 


A-A 
UNIDENT 
I FlED 
A-A 
OBTAI 
NING 
A-A 
UT 
IUTY 
A-A. 
ORD 
NANCE 


A-A(3)A 
VER 
IFICATION 
A...:. A 
PERMA 
NENT 
A-A 
VIC 
INITY 
A-A 
PLAN 
NING 
A-A(l)A 
v 
ICINITY 
A-A 
RAI 
NING 
A-A 
VI SIB 
IUTY 
A-A 
REM AI 
NING 
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Table D-7 (rj). List of words containing like letters repeated at various intervals (U) -Continued 


A-A 
RETUR NING 
A-A 
CA 
RTRIDGE 
A-A 
RUN 
NING 
A-A 
D RYRUN 


A-A 
SCREE 
NING 
A-A 
ENTE 
RPRISE 


A-A 
TRAI 
NING 
A-A 
ENTE 
RPRISING 


A-A(2)A 
U NKNOWN 
A-A 
ER ROR 


A-A 
AUT 
OMOBILE 
A-A 
FINGE 
RPRINT 
A-A 
CHRON OLOGICAL 
A-A 
FO 
RTRESS 


A-A(I)A 
CHR 
ONOLOGICAL 
A-A 
INTE 
RPRETATION 
A-A 
c OLON 
A-A(3)A 
INTE 
RPRETER 
A-A 
C OLONEL 
A-A 
LIB 
RARY 


A-A 
C OLORS 
A-A 
MIR ROR 


A-A 
EC 
ONOMIC 
A-A 
NEA 
RER 
A-A 
H ONOR 
A-A 
su RPRISE 


A-A 
LOC 
OMOTIVE 
A-A 
TER ROR 


A-A(l)A 
L OCOMOTIVE 
A-A 
ADD RES 
SES 


A-A 
LO OKOUT 
A-A 
ANALY 
SIS 


A-A 
METEOR OLOGICAL 
A-AA 
AS 
SESSMENT 


A-A(l)A 
METE OROLOGICAL 
A-AA(4)A 
AS 
SESSMENTS 


A-A 
MON 
OPOLY 
A-A 
AS 
SIST 


A-A{l)A 
M ONOPOLY 
A-A 
AS 
SISTANT 


A-A 
M OTOR 
A-A 
AS 
SISTANCE 


A-A 
M OTORCYCLE 
A-A 
CA SES 


A-A 
M OTORIZED 
A-A 
CHAS 
SIS 


A-A 
OBOE 
A-A 
CRI 
SIS 


A-A 
PH 
OTOGRAPHY 
A-A 
DEFEN SES 


A-A 
PR 
OMOTE 
A-A 
DI 
SASTER 


A-A(2)A 
PR OMOTION 
A-A 
EXERCI 
SES 


A-A(3)A 
PR 
OPORTION 
A-A 
EXPEN SES 


A-A 
PR OPOSALS 
A-A 
CLAS 
SES 


A-A 
PR OPOSE 
A-A 
HEA VYLOS SES 


A-A 
PROT 
OCOL 
A-A 
LOS 
SES 


A-A{l)A 
PR OTOCOL 
A-A 
OUTPO STS 


A-A 
PR OVOST 
A-A 
PARENTHE SES 


A-A 
RIG 
OROUS 
A-A 
PARENTHE SIS 


A-A 
SEMIC 
OLON 
A-A 
PAS 
SES 


A-A(2)A 
T OMORROW 
A-A 
PER SISTENT 


A-A 
T OPOGRAPHIC 
A-AA 
POS 
SESSION 


A-A 
VIG OROUS 
A-A 
PROTE STS 


A-A 
NEWS 
PAPER 
A-A 
PURPO SES 


A-A 
NEWS 
PAPERS 
A-A 
RE 
SIST 


A-A 
PIPE 
A-A 
RE 
SISTANCE 


A-A 
POPULATED 
A-AA 
SESSION 


A-A 
POPULATION 
A-A 
SUB 
SISTENCE 


A-A 
AI 
RCRAFf 
A-A 
SUSPECTED 


A-A 
AI 
RDROME 
A-A 
SUSPEND 


A-A 
ANTIAI 
RCRAFT 
A-A 
SUSPENDED 


A-A 
ARB IT 
RARY 
A-A{3)A 
SUSPENSE 
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Table D-7 (~). Ust of words containing like letters repeated at various intervals (U) -Continued 


A-A(3)A 
SUSPENSION 
A-A 
TEN TATIVE 
A-A 
SUSPICION 
A-A 
TITLE 
A-A(6)A 
SUSPICIONS 
A-A 
TOTAL 


A-A(6)A 
SUSPICIOUS 
A-A 
TOTALING 


A-A 
SYSTEM 
A-A 
TRANSPOR 
TATION 


A-A 
WITNES 
SES 
A-A 
UNITEDS TATES 


A-A 
AL TITUDE 
A-A 
WI 
THTHE 
A-A 
AN 
TITANK 
A-A 
A UGUST 


A-A 
CI 
TATION 
A-A 
CONTIN 
UOUS 


A-A 
COMPE 
TITION 
A-A 
F 
UTURE 
A-A 
COMPU TATION 
A-A 
INA UGURATION 


A-A 
CONSTI TUTE 
A-A 
UN 
USUAL 


A-A 
CONSTI TUTING 
A-A(l)A 
UNUSUAL 


A-A(l)A 
CONS TITUTING 
A-A 
USUAL 


A-A 
CONSTI TUTION 
A-A 
SUR VIVED 
A-A(l)A 
CONS TITUTE 
A-A 
A WKWARD 
A-A(l)A 
CONS TITUTION 
A(2)A 
ADJACENT 
A-A 
DESTI TUTE 
A(2)A 
ADVANCING 
A-A(l)A 
DES TITUTE 
A(2)A 
ADV 
ANTAGEOUS 


A-A 
DIC 
TATED 
A(2)A 
ADV 
ANT AGE 
A-A 
DIC 
TATOR 
A(2)A(2)A 
ADVANTAGE 
A-A 
DIE TITIAN 
A(2)A(2)A 
ADVANTAGEOUS 


A-A 
INSTI TUTION 
A(2)A 
ADVANCE 


A-A(l)A 
INS 
TITUTION 
. A(2)A 
ADVANCED 


A~A 
INTERPRE TATION 
A(2)A 
AFFAIR 
A-A 
INVI TATION 
A(2)A 
AL ASKA 


A-A 
LA TITUDE 
A(2)A(l)A 
ALMANAC 
A-A 
LIMI TATION 
A(2)A 
ALWAYS 


A-A 
NECESSI 
TATE 
A(2)A 
AMB 
ASSADOR 


A-A 
PAR TITION 
A(2)A(2)A 
AMBASSADOR 


A-A 
RADIOS TATION 
A(2)A(l)A 
APPARATUS 


A-A 
REINS TATE 
A(2)A 
APPARENT 


A-A(4)A 
REINS T ATEMENT 
A(2)A 
APPARENTLY 
A-A 
REPRESEN T A TIVE 
A(2)A 
AR 
ABIA 
A-A 
REPRESEN TATIONS 
A(2)A 
AREA 
A-A 
SANI 
TATION 
A(2)A 
ARMAMENT 
A-A(4)A 
S TATEMENT 
A(2)A 
ARRANGE 
A-A 
S TATES 
A(2)A 
ARRANGEMENT 
A-A 
S TATION 
A(2)A 
ASIA 


A-A 
S TATIONS 
A(2)A 
ASIATIC 
A-A(2)A 
S TATISTICS 
A(2)A 
ASSAULT 


A-A 
S TATUS 
A(2)A 
ATLANTIC 
A-A 
SUBSTI TUTE 
A(2)A 
ATIACH 


A-A 
SUBSTI TUTION 
A(2)A 
ATT ACHEMENT 
A-A(l)A 
SUBS TITUTE 
A(2)A 
ATTACK 


A-A(l)A 
SUBS TITUTION 
A(2)A 
ATIAIN 
A-AA 
TATTOO 
A(2)A 
ATTAINMENT 
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Table D-7 (~).List of words containing like letters repeated at various intervals (U) -Continued 


A(2)A 
AV 
AILABLE 
I A(2)A 
ST 
ANDARD 
A(2)A 
AVIATION 
A(2)A 
ST 
ANDARDS 


A(2)A 
AVIATOR 
A(2)A 
TH 
ATHAVE 
A(2)A 
B 
AGGAGE 
A(2)A 
TRANS 
ATLANTIC 


A(2)A 
B 
ARRACKS 
A(2)A(2)A 
TR 
ANSATLANTIC 


A(2)A 
B 
ARRAGE 
A(2)A 
v 
ARIATION 
A(2)A 
B 
ATTAUON 
A(2)A 
VETERIN 
ARIAN 
A(2)A 
c 
AMPAIGN 
A(2)A 
w ARFARE 
A(2)A 
c 
ANVAS 
A(2)A 
WILL 
ATTACK 


A(2)A 
c 
APTAIN 
A(2)A 
ATOMIC 
BOMB 


A(2)A 
c 
ASUAL 
A(2)A 
BARBED 
A(2)A 
c 
ASUALTIES 
A(2)A 
BOMB 


A(2)A 
c 
ASUALTY 
A(2)A 
BOMBARD 
A(2)A 
CH 
APLAIN 
A(2)A 
BOMBARDED 
A(2)A 
co 
ASTAL 
A(2)A 
BOMBARDMENT 
A(2)A 
COMM 
AND ANT 
A(2)A 
BOMBER 
A(2)A 
COUNTER 
ATTACK 
A(2)A 
BRIBE 
A(2)A 
DEB 
ARKATION 
A(2)A 
BRIBERY 


A(2)A 
DI 
A GRAM 
A(2)A 
BULB 


A(2)A 
EMB 
ARKATION 
A(2)A 
DIVE 
BOMBER 
A(2)A 
EV 
ACUATE 
A(2)A 
HEAVY 
BOMBER 
A(2)A 
EV 
ACUATING 
A(2)A 
LIGHT 
BOMBER 
A(2)A 
EV 
ACUATION 
A(2)A 
MEDIUM 
BOMBER 
A(2)A 
EV 
ALUATION 
A(2)A 
CANCEL 


A(2)A 
GR 
ADUAL 
A(2)A 
CANCELLATION . 
A(2)A 
INFL 
AM MABLE 
A(2)A 
CANCELLED 


A(2)A 
INST 
ALLATIONS 
A(2)A 
CHECK 


A(2)A 
INST 
ANTANEOUS 
A(2)A 
CIRCLE 


A(2)A 
J 
ANUARY 
A(2)A 
CIRCUIT 


A(2)A 
M 
ANDATE 
A(2)A 
CIRCUITOUS 


A(2)A 
M 
AND A TED 
A(2)A 
CIRCULAR 


A(2)A 
M 
ANGANESE 
A(2)A 
CIRCULATE 


A(2)A 
M 
ANUAL 
A(2)A 
CIRCULATION 


A(2)A 
MEMOR 
ANDA 
A(2)A 
CIRCUMSTANTIAL 


A(2)A 
NAVAL 
ATTACK 
A(2)A(6)A 
CIRCUMSTANCES 


A(2)A 
NAY 
ALBASE 
A(2)A 
CONCEAL 


A(2)A 
NAY 
ALBATTLE 
A(2)A 
CONCEALMENT 


A(2)A 
p 
ACKAGE 
A(2)A 
CONCENTRATE 


A(2)A 
PAR 
A GRAPH 
A(2)A 
CONCENTRATING 
A,(2)A 
PAR 
ALLAX 
A(2)A 
CONCENTRATION 


A(2)A 
p 
ASSAGE 
A(2)A 
CONCERNING 


A(2)A 
PRE 
ARRANGED 
A(2)A 
CONCESSION 


A(2)A 
R 
ADIAL 
A(2)A 
CONCILIATION 


A(2)A 
R 
ADIATE 
A(2)A 
CONCLUDE 


A(2)A 
R 
ADIATION 
A(2)A 
CONCLUSION 


A(2)A 
RET 
ALIATION 
A(2)A 
CONCRETE 


A(2)A 
SE 
APLANES 
A(2)A 
EN 
CIRCLE 
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A(2)A 
EN CIRCLING 
A(2)A 
CONV AL ESCENT 


A(2)A 
IMPRA CTICABLE. 
A(2)A 
CONY ENIENT 
A(2)A 
PRA CTICAL 
A(2)A 
CORR ECTED 
A(2)A 
SE. CRECY 
A(2)A 
CORRESPOND ENCE 
A(2)A 
SIGNIFI CANCE 
A(2)A 
DEC EMBER 
A(2)A 
TA CTICAL 
A(2)A 
DECIPH ERMENT 
A(2)A 
TA CTICS 
A(2)A 
DECR EASE 


A(2)A 
VA CANCY 
A(2)A 
DECR EASED 


A(2)A 
HUN DRED 
A(2)A(2)A 
D ECREASE 
A(2)A 
IN DEED 
A(2)A(2)A 
D ECREASED 
A(2)A 
ONEHUN DRED 
A(2)AA 
D ECREE 
A(2)A 
STAN DARD 
A(2)A 
DEF EATED 
A(2)A 
STAN DARDS 
A(2)A 
DEF ENDER 
A(2)A 
ABS ENCE 
A(2)A 
DEF ENDED 
A(2)A 
ADDR ESSED 
A(2)A 
DEF ENSE 


A(2)A 
ADDR ESSES 
A(2)A 
DEF ENSES 


A(2)A 
AGR EEMENT 
A(2)A 
DEF ERRED 
A(2)A 
APP EARED 
A(2)AA 
D EGREE 
A(2)A 
ARR ESTED 
A(2)A 
DEP ENDENT 
A(2)A 
BATT ERIES 
A(2)A 
D EPRESSION 


A(2)A 
BA TTL EFIELD 
A(2)A 
DES ERTED 
A(2)AA(l)A 
BE ENNEEDED 
A(2)A 
DES ERTER 
A(2)A 
BEENN EEDED 
A(2)A 
DIFFER ENCE 
A(2)A 
BE ETLE 
A(2)A 
DISAPP EARED 
'A(2)A(l)A 
B ESIEGED 
A(2)A 
DIS EASE 


A(2)A 
B ETTER 
A(2)A 
. DISI.NF ECTED 
A(2)AA 
B ETWEEN 
A(2)A 
DISP ERSED 


A(2)A 
BR EEZE 
A(2)A 
DISP 
ERSE 
A(2)A 
CANC 
ELLED 
A(2)A 
DISTR ESSED 


A(2)A 
C EASE 
A(2)A 
EAGER 
A(2)A 
C ENTER 
A(2)A 
ECHELON 


A(2)A(l)A 
C ENTERED 
A(2)A(3)A 
ECHELONED 
A(2)A 
C ENTERING 
A(2)A(4)A 
ECHELONMENT 
A(2)A 
CHALL ENGE 
A(2)A 
EDGE 
A(2)A 
CH EESE 
I 
A(2)A 
EFFECT 
A(2)A · 
CIGAR ETTE 
II A(2)A 
EFF ECTED 
A(2)A 
COINCID ENCE 
A(2)A(2)A 
EFFECTED 
A(2)A 
COMM ENCE 
I A(2)A(4)A 
EFFECTIVE 
A(2)A(l)A 
COMM ENCEMENT 
I A(2)A(l)A 
ELS EWHERE 
A(2)A 
COMM ERCE 
A(2)A(2)A(l)A 
A(2)A 
COMP ELLED 
A(2)A 
EM 
ERGENCY 
A(2)A 
COMPR ESSED 
A(2)A 
ENCIPH ERMENT 
A(2)A 
COND EMNED 
A(2)A 
EN 
EMIES 


A(2)A 
COND ENSED 
A(2)A 
ENT ENTE 
A(2)A 
CONFER ENCE 
A(2)A(2)A 
ENTENTE 
A(2)A 
CONF ERRED 
A(2)A 
ENTER 
A(2)A 
CONFID ENCE 
A(2)A 
ENTERING 
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Table D-7 (¢).List of words containing like letters repeated at various intervals (U) ,-Continued 


A(2)A 
ENTERPRlSING 
A(2)A 
INT 
ERCEPT 


A(2)A(S)A 
ENTERPRlSE 
A(2)A 
INTERC 
EPTED 
A(2)A(6)A 
ENTERTAINMENT 
A(2)A(2)A 
INT 
ERCEPTED 


A(2)A 
ENVELOP 
A(2)A 
INTERFER 
ENCE 


A(2)A(3)A 
ENVELOPE 
A(2)A 
INT 
ERFERING 
A(2)A 
ETHER 
A(2)A(l)A 
INT 
ERFERE 
A(2)A 
EXCEPT 
A(2)A( 1 )A(2)A 
INT 
ERFERENCE 


A(2)A 
EXCESS 
A(2)A 
INT 
ERMENT 
A(2)A(4)A 
EXCESSIVE 
A(2)A(4)A 
INT 
ERMEDIATE 
A(2)A 
EXPECT 
A(2)A 
INT 
ERVENING 
A(2)A 
EXPEDITING 
A(2)A(I)A 
INT 
ERVENE 
A(2)A 
EXPEDITION 
A(2)A 
INT 
ERVENTION 


A(2)A(3)A 
EXPEDITE 
A(2)A 
INV 
ENTED 
A(2)A 
EXP 
ELL ED 
A(2)A 
K 
EEPER 
A(2)A(2)A 
EXPELLED 
A(2)A 
L 
EADER 
A(2)A 
EXPEND 
A(2)A 
L 
EAVE 
A(2)A 
EXP 
ENDED 
A(2)A 
L 
ETTER 
A(2)A(2)A 
EXPENDED 
A(2)A(I)A 
L 
ETTERED 
A(2)A 
EXP 
ENSES 
A(2)A 
LIC 
ENSE 


A(2)A(2)A 
EXPENSES 
A(2)A 
LI 
EUTENANT 
A(2)A(4)A 
EXPENSIVE 
A(2)A 
MAN 
EUVER 
A(2)A 
EXPERI 
ENCE 
A(2)A 
MAT 
ERIEL 
A(2)A(2)A 
EXP 
ERlENCE 
A(2)A 
M 
EAGER 
A(2)A(2)A(2)A 
EXPERlENCE 
A(2)A 
M 
EMBER 
A(2)A(3)A 
EXPERIMENT 
A(2)A 
MESS 
ENGER 
A(2)A 
EXTEND 
A(2)A(2)A .. 
M 
ESSENGER 


A(2)A 
EXT 
ENDED 
A(2)A 
N 
EARER 
A(2)A(2)A 
EXTENDED 
A(2)A 
N 
EAREST 


A(2)A 
EXTENDING 
A(2)A 
NEGLIG 
ENCE 


A(2)A 
EXTENSION 
A(2)A 
NIN 
ETEEN 
A(2)A(4)A 
EXTENSIVE 
A(2)A 
NIN 
ETEENTH 
A(2)A 
EXTENT 
A(2)A 
NORTHW 
ESTERN 


A(2)A 
EXTERlOR 
A(2)A 
NOV 
EMBER 
A(2)A 
EXTERMINATION 
A(2)A 
OBS 
ERVE 


A(2)A(6)~ 
EXTERMINATE 
A(2)A 
OBS 
ERVER 
A(2)A 
FI 
ERCE 
A(2)A 
OFF 
ENDED 
A(2)A 
GR 
EASE 
A(2)A 
OFF 
ENSE 


A(2)A 
HAY 
EBEEN 
A(2)A 
OVERWH 
ELM ED 
A(2)A 
H 
ELPER 
! A(2)A 
PASS 
ENGER 
A(2)A 
IMPR 
ESSED 
A(2)A 
PRECED 
ENCE 


A(2)A 
INCID 
ENCE 
A(2)A 
PREFER 
ENCE 


A(2)A 
INCOMPET 
ENCE 
A(2)A 
PREF 
ERRED 
A(2)A 
INCR 
EASED 
A(2)A 
PREPAR 
ED NESS 


A(2)A 
INDEP 
ENDENT 
A(2)A 
PRES 
ERVE 
A(2)A 
INF 
ECTED 
A(2)A 
PR 
ESSED 


A(2)A 
INFLU 
ENCE 
A(2)A 
PROC 
EEDED 
A(2)A 
INTELLIG 
ENCE 
A(2)A 
PROT 
ECTED 


0-64 
. t:nNI='InF"NTIAI - 


. CONFIDENTIAL 


Table D-7 Sfl[. List of words containing like letters repeated at various intervals (U) -Continued 


A(2)A 
PROT 
ESTED 
A(2)A 
SOUTHW 
ESTERN 


A(2)A 
REC 
EIVE 
A(2)A 
ST 
EAMER 
A(2)A 
REC 
ElVER 
A(2)A 
SUBSIST 
ENCE 


A(2)A 
RECOMM 
ENDED 
A(2)A 
succ 
EEDED 
A(2)A 
R 
ECREATION 
A(2)A 
SURR 
ENDER 
A(2)A 
R 
ECREATIONAL 
A(2)A(l)A 
SURR 
ENDERED 
A(2)A 
REFER 
ENCE 
A(2)A 
SUSP 
ECTED 


A(2)A 
REJ 
ECTED 
A(2)A 
SUSP 
ENDED 
A(2)A 
REL 
EASE 
A(2)A 
SUSP 
ENSE 


A(2)A 
R 
ELIEF 
A(2)A(S)A 
T 
EMPERATURE 


A(2)A(l)A 
R 
ELIEVE 
A(2)A(l)A 
THR 
EATENED 
A(2)A 
REM 
EDIES 
A(2)A 
TRANSF 
ERRED 
A(2)A 
REM 
EMBER 
A(2)A 
TRANSV 
ERSE 


A(2)A 
REP 
EATED 
A(2)A 
TRAY 
ERSE 
A(2)A 
REP 
EATER 
A(2)A 
TW 
ELVE 
A(2)A 
REP 
ELLED 
A(2)A 
UNEXP 
ENDED 
A(2)A(l)A 
R 
EPRESENT 
A(2)A(2)A 
UN 
EXPENDED 
A(2)A(l)A 
R 
EPRESENTATION 
A(2)A 
v ESSEL 


A(2)A(l)A(6)A 
R 
EPRESENT ATIVE 
A(2)A 
v ESSELS 


A(2)A 
R 
EQUEST 
A(2)A 
w EDNESDAY 


A(2)A 
REQU 
ESTED 
A(2)A 
w ESTERLY 


A(2)A(2)A 
R 
EQUESTED 
A(2)A 
w ESTERN 


A(2)A 
RES 
ERVE 
A(2)A 
WH 
ETHER 
A(2)A 
RES 
ERVES 
A(2)A 
WITN 
ESSES 


A(2)A 
R 
ESPECT 
A(2)A 
WR 
EC~ED 


A(2)A 
R 
ESPECTFULL Y 
A(2)A 
y 
ESTERDAY 


A(2)A 
R 
ESPECTS 
A(2)A 
BA 
GGAGE 
A(2)A 
R 
ETREAT 
A(2)A 
DAMA 
GING 
A(2)A 
REV 
ENUE 
A(2)A 
ENGA 
GING 
A(2)A 
REV 
ERSE 
A(2)A 
FOR 
GING 
A(2)A 
R 
EVIEW 
A(2)A 
GAUGE 


A(2)A(l)A 
R 
EVIEWED 
A(2)A 
GEOGRAPHIC 


A(2)A 
R 
EVIEWING 
A(2)A 
GEOGRAPHICAL 


A(2)A(l)A 
S 
EALEVEL 
A(2)A 
LAN 
GUAGE 
A(2)A 
s EAMEN 
A(2)A 
NE 
GLIGENT 
A(2)A 
s ECRECY 
A(2)A 
NE 
GLIGENCE 


A(2)A 
S 
ECRETARY 
A(2)A 
ZI 
GZAG 
A(2)A 
S 
EIZE 
A(2)A 
HIGH 
A(2)A 
SEL 
ECTED 
A(2)A 
HIGHER 
A(2)A 
SENT 
ENCE 
A(2)A 
HIGHEST 


A(2)A(2)A 
S 
ENTENCE 
A(2)A 
T 
HATHAVE 
A(2)A 
SEPT 
EMBER 
A(2)A 
w HETHER 
A(2)A(2)A 
S 
EPTEMBER 
A(2)A 
w HICH 


A(2)A 
s ERGEANT 
A(2)A 
ADM 
ISS ION 


A(2)AA 
SEV 
ENTEEN 
A(2)A 
A 
IRFIELD 
A(2)AA 
SEV 
ENTEENTH 
A(2)A 
AS 
IATIC 


A(2)A 
SH 
ELLED 
A(2)A 
AS SOC 
IATION 
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- 
A(2)A 
AV 
IATION 
A(2)A 
INTERD 
ICTION 


A(2)A 
BALL 
ISTIC 
A(2)A(3)A 
INVITATION 


A(2)A 
BALL 
ISTICS 
A(2)A(3)A 
IRRIGATION 


A(2)A 
BEG 
INNING 
A(2)A 
K 
I LUNG 


A(2)A 
B 
INDING 
A(2)A(l)A 
L 
lABILITY 
A(2)A 
BU 
ILDING 
A(2)A 
L 
IFTING 
A(2)A 
CHARACTER 
ISTIC 
A(2)A 
L 
I QUID 


A(2)A 
co 
INCIDENCE 
A(2)A 
LOG 
ISTICS 


A(2)A 
COMM 
ISSION 
A(2)A 
M 
IDNIGHT 
A(2)A 
COMM 
ISSIONER 
A(2)A 
M 
ILLIMETER 
A(2)A 
COUNCIL 
IATION 
A(2)A 
M 
ISFIRE 
A(2)A 
CONSCR 
IPI'ION 
A(2)A 
M 
I SF IRES 


A(2)A 
DESCR 
IPI'IVE 
A(2)A 
M 
ISSING 


A(2)A 
DESCR 
IPTION 
A(2)A 
M 
ISSION 


A(2)A(l)A 
D 
lET IT IAN 
A(2)A 
M 
ISSIONS 


A(2)A 
D 
IFFICULT 
A(2)A 
PATR 
I OTIC 


A(2)A(4)A 
D 
IFFICULTIES 
A(2)A 
PERM 
ISSION 


A(2)A 
DISC 
IPLINE 
A(2)A 
PHIL 
IPPINES 


A(2)A(2)A 
D 
ISCIPLINE 
A(2)A 
PR 
INCIPAL 


A(2)A 
D 
ISMISS 
A(2)A 
PR 
INCIPLE 


A(2)A 
D 
ISMISSAL 
A(2)A 
PR 
INTING 
A(2)A 
D 
I STILL 
A(2)A 
PR 
IORITY 


A(2)A(3)A 
D 
ISTINCTION 
A(2)A 
RAD 
IATION 


A(2)A 
DISTINGU 
ISHING 
A(2)A 
REF 
I LUNG 


A(2)A(3)A 
D 
ISTINGUISH 
A(2)A 
RESTR 
ICTION 


A(2)A(3)A 
D 
ISTINGUISHED 
A(2)A 
RETAL 
IATION 


A(2)A(3)A(2)A 
D 
ISTINGUISHING 
A(2)A 
REV 
I EWING 
A(2)A 
DR 
IFTING 
A(2)A 
SH 
IPPING 


A(2)A 
ENL 
!STING 
A(2)A(l)A 
s 
IGNIFICANT 


A(2)A 
F 
ILLING 
A(2)A(l)A 
s 
IGNIFICANCE 


A(2)A 
F 
INDING 
A(2)A 
s 
IGNIFY 
A(2)A 
F 
ISHING 
A(2)A 
s 
INKING 
A(2)A 
F 
ITTING 
A(2)A 
SK 
IRMISH 


A(2)A(l)A 
IGNITION 
A(2)A 
STAT 
ISTICS 


A(2)A 
ILLITERATE 
A(2)A 
SUBM 
ISSION 


A(2)A(4)A 
IMMIGRATION 
A(2)A 
SUPER 
IORITY 


A(2)A 
INCIDENCE 
A(2)A 
sw 
IMMING 
A(2)A 
INCIDENT 
A(2)A 
TRANSM 
ISS ION 


A(2)A 
INDICATE 
A(2)A 
VAR 
IATION 


A(2)A 
INDICATED 
A(2)A 
v 
ICTIM 
A(2)A(3)A 
INDICATING 
A(2)A 
w 
ILLIAM 
A(2)A(3)A 
INDICATION 
A(2)A 
w 
ITHIN 
A(2)A 
INDIRECT 
A(2)A 
AVAI 
LABLE 
A(2)A(l)A 
INDIVIDUAL 
A(2)A 
FUE 
LOlL 


A(2)A 
INFL 
ICTING 
A(2)A 
PARA 
LLEL 
A(2)A 
INS 
IGNIA 
A(2)A 
COM 
MITMENT 
A(2)A(2)A 
INSIGNIA 
A(2)A 
MAIM 
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A(2)A 
MEDIU 
MBOMBER 
A(2)A 
I 
NCENDIARY 


A(2)A 
ABA 
NDON 
A(2)A 
I 
NCENTIVE 


A(2)A 
ADVA 
NCING 
A(2)A 
INDEPE 
NDENT 
A(2)A 
AFTER. NOON 
A(2)A 
I 
NFANTRY 


A(2)A 
AN 
NOUNCE 
A(2)A 
I 
NLAND 
A(2)A(4)A 
AN 
NOUNCEMENT 
A(2)A 
INSTA 
NTANEOUS 


A(2)AA 
A 
NTENNA 
A(2)A 
I 
NT END 
A(2)A 
ASSIG 
NMENT 
A(2)A 
I 
NTENSIVE 
A(2)A 
ASSIG 
NMENTS 
A(2)A 
I 
NTENT 
A(2)A 
ATTAI 
NMENT 
A(2)A(3)A 
I 
NTENTION 
A(2)A 
BEGI 
NNING 
A(2)A 
INTER 
NMENT 
A(2)A 
BI 
NDING 
A(2)A 
I 
NVENT 
A(2)A 
COMMA 
NDANT 
A(2)A 
I 
NVENTED 
A(2)A 
COMMA 
NDING 
A(2)A(3)A 
I 
NVENTION 
A(2)A 
co 
NCENTRATE 
A(2)A 
LA 
NDING 
A(2)A(5)A 
CO 
NCENTRA TING 
A(2)A(l)A 
MAl 
NTENANCE 


A(2)A(6)A 
co 
NCENTRATION . 
A(2)A 
MA 
NGANESE 
A(2)A 
CO 
NDENSED 
A(2)A 
MA 
NNING 
A(2)A 
co 
NFINE 
A(2)A 
NOON 


A(2)A(3)A 
co 
NFINEMENT 
A(2)A 
OPI 
NION 


A(2)A(l)A 
CO 
NTINENTAL 
A(2)A 
PAl 
NTING 
A(2)A(2)A 
CO 
NTINGENT 
A(2)A 
PLA 
NNING 
A(2)A 
CONTI 
NGENT 
A(2)A 
PO 
NTON 


A(2)A 
CO 
NTINUAL 
A(2)A 
PRI 
NTING 
A(2)A 
co 
NTINUE 
A(2)A 
QUARA 
NTINE 
A(2)A 
CO 
NTINUOUS 
A(2)A 
RU 
NNING 
A(2)A(5)A 
CO 
NTINUATION 
A(2)A 
SE 
NTENCE 


A(2)A 
CONVE 
NIENT 
A(2)A 
SE 
NTINEL 
A(2)A(2)A 
CO 
NVENIENT 
A(2)A 
SI 
NKING 
A(2)A 
CORRESPO 
NDENCE 
A(2)A 
SU 
NKEN 
A(2)A 
CORRESPO 
NDING 
A(2)A 
U 
NION 


A(2)A 
DEPE 
NDENT 
A(2)A 
UNK 
NOWN 


A(2)A 
DISCONTI 
NUANCE 
A(2)A 
U 
NTENABLE 
A(2)A 
DISCO 
NTINUE 
A(2)A(4)A 
ACC 
OMMODATION 


A(2)A(2)A 
DISCO 
NTINUANCE 
A(2)A 
AER 
ODROME 


A(2)A 
ECHELO 
NMENT 
A(2)A 
B 
OTTOM 


A(2)A 
E 
NGINE 
A(2)A 
B 
OYCOTT 


A(2)A 
E 
ENGINEER 
A(2)A 
c OMMON 


A(2)A(4)A 
E 
NGINEERING 
A(2)A 
c OMPOSED 


A(2)A(5)A 
E 
NTANGLEMENT 
A(2)A(4)A 
c OMPOSITION 


A(2)A 
E NTENTE 
A(2)A(5)A 
c ONFORMATION 


A(2)A 
ENTERTAI 
NMENT 
A(2)A 
c ONVOY 


A(2)A 
EXTE 
NDING 
A(2)A 
c ORPORAL 


A(2)A 
FI 
NDING 
A(2)A(4)A 
c ORPORATION 


A(2)A 
FLA 
NKING 
A(2)A 
CUST 
OMHOUSE 


A(2)A 
FORE 
NOON 
A(2)A 
D 
OCTOR 


A(2)A 
GOVER 
NMENT 
A(2)A 
EN 
ORMOUS 
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A(2)A 
EXPL 
OSION 
A(2)A 
DEPA 
RTURE 


A(2)A 
EXPL 
OSIONS 
A(2)A 
DESE 
RTER 
A(2)A 
F 
OGHORN 
A(2)A 
DETE 
RIO RATE 
A(2)A 
F 
OLLOW 
A(2)A 
E 
RROR 


A(2)A 
FO 
OTHOLD 
A(2)A 
EXTE 
RIOR 


A(2)A 
G 
ONIOMETER 
A(2)A(4)A 
EXT 
RAORDINARY 
A(2)A 
GYR 
OSCOPIC 
A(2)A 
FEB 
RUARY 


A(2)A 
L 
OOKOUT 
A(2)A 
FO 
RWARD 
A(2)A 
N 
ONCOMBATANT 
A(2)A 
HA 
RBOR 


A(2)A 
OBSOLETE 
A(2)A 
HEADQUA 
RTERS 


A(2)A 
OCTOBER 
A(2)A 
HYD 
ROGRAPHIC 


A(2)A 
OPPOSE 
A(2)A 
INTE 
RFERE 
A(2)A 
OPPOSITE 
A(2)A 
INTE 
RFERENCE 


A(2)A(4)A 
OPPOSITION 
A(2)A 
INTE 
RFERING 
A(2)A 
p 
OlSON 
A(2)A 
INTE 
RIOR 


A(2)A 
p 
ONTON 
A(2)A 
Ml 
RROR 


A(2)AA 
p 
ONTOON 
A(2)A 
MO 
RTAR 
A(2)A 
p 
OSTOFFICE 
A(2)A 
MU 
RDER 
A(2)A 
PROM 
OTION 
A(2)A 
OBSE 
RVER 
A(2)A 
REC 
ONNOITER 
A(2)A 
0 
RDER 
A(2)A 
REC 
ONNOITERING 
A(2)A 
0 
RDERED 
A(2)A 
SCHO 
OLHOUSE 
A(2)A 
0 
RDERS 


A(2)A 
TOM 
ORR OW 
A(2)A 
PA 
RAGRAPH 
A(2)A 
VICT 
ORIOUS 
A(2)A 
PE 
RFORMANCE 
A(2)A 
AP 
PROPRIATE 
A(2)A 
p 
RAIRIE 
A(2)A 
1M 
PROPER 
A(2)AA 
p 
REARRANGED 
A(2)A 
PREPARATION 
A(2)A 
p 
RIOR 


A(2)A 
PREPARE 
A(2)A 
p 
RIORITY 
A(2)A 
PREPAREDNESS 
A(2)A 
p 
ROGRAM 


A(2)A 
PREPARING 
A(2)A 
p 
ROGRESS 


A(2)A 
PROPER 
A(2)A 
p 
ROGRESSIVE 


A(2)A 
PROPORTION 
A(2)A 
QUA 
RTER 
A(2)A 
PROPOSALS 
A(2)A 
QUA 
RTERS 


A(2)A 
PROPOSE 
A(2)A(S)A 
QUA 
RTERMASTER 


A(2)A 
PUMP 
A(2)A 
REAR 
A(2)A 
PURPOSE 
A(2)A(3)A 
REARGUARD 
A(2)A 
PURPOSES 
A(2)A 
RECO 
RDER 
A(2)A 
AE 
ROD ROME 
A(2)A 
RECREATION 


A(2)A 
AI 
RBORNE 
A(2)A 
RECREATIONAL 


A(2)A 
APP 
ROPRIATE 
A(2)A 
RECRUIT 


A(2)A 
A 
RMOR 
A(2)A 
RECRUITING 


A(2)A(4)A 
A 
RMOREDCAR 
A(2)A 
REORGANIZATION 


A(2)A 
A 
RMORY 
A(2)A 
REPRESENT 


A(2)A 
CAR 
RIER 
A(2)A 
REPRESENTATIVE 


A(2)A 
co 
RPORAL 
A(2)A 
REPRESENTATION 


A(2)A 
co 
RPORATION 
A(2)A 
REPRISAL 


A(2)A 
cou 
RIER 
A(2)A 
REPRISALS 
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A(2)A 
RETREAT 
A(2)A 
ADJU 
TANT 
A(2)A 
RETROACTIVE 
A(2)A 
AD MINIS 
TRATIVE 
A(2)A 
STA 
RTER 
A(2)A 
AD MINIS 
TRATION 


A(2)A 
SUPE 
RIOR 
A(2)A 
ARBI 
TRATION 


A(2)A 
SUPE 
RIORITY 
A(2)A 
ASS IS 
TANT 
A(2)A 
TE 
RROR 
A(2)A 
AT 
TENTION 


A(2)A 
WA 
RFARE 
A(2)A 
CA 
TASTROPHE 


A(2)A 
ADDRE 
SSES 
A(2)A 
CIRCUMS 
TANTIAL 
A(2)AA 
A 
SPOSSIBLE 
A(2)A 
COMB A 
TANT 
A(2)A 
AS 
SESSMENT 
A(2)A 
CONCEN 
TRATE 
A(2)A(4)A 
AS 
SESSMENTS 
A(2)A 
CONCEN 
TRATING 
A(2)AA 
A 
SSESSMENT 
A(2)A 
CONCEN 
TRATION 


A(2)AA(4)A 
A 
SSESSMENTS 
A(2)A 
CON 
TACT 


A(2)A 
AS 
SETS 
A(2)A 
DEMONS 
TRATE 
A(2)A 
A 
SSIST 
A(2)A 
DEMONS 
TRATED 
A(2)A 
A 
SSISTANT 
A(2)A 
DEMONS 
TRATION 


A(2)A 
A 
SSISTANCE 
A(2)A 
DE 
TECTOR 


A(2)AA 
CARELES 
SNESS 
A(2)A 
DE 
TENTION 


A(2)A 
CEN 
SORSHIP 
A(2)A 
EN 
TENTE 
A(2)A 
CHA 
SSIS 
A(2)A(6)A 
EN 
TERT AINMENT 
A(2)A 
CRUI 
SERS 
A(2)A 
EX 
TENT 
A(2)AA 
DI scuss 
A(2)A 
ILL US 
TRATE 
A(2)AA 
DI 
SCUSSED 
A(2)A 
ILL US 
TRATION 


A(2)AA 
DI 
SCUSSION 
A(2)A 
IMPOR 
TANT 
A(2)A 
DI 
SEASE 
A(2)A 
INCOMPE 
TENT 
A(2)AA 
DI 
SMISSAL 
A(2)A 
INI 
TIATE 
A(2)AA 
DI 
SMISS 
A(2)A 
INS 
TANT 
A(2)A 
DI 
SPOSITION 
A(2)A 
INS 
TANTANEOUS 


A(2)A 
EM BAS 
SIES 
A(2)A 
INS 
TANTLY 
A(2)A 
GLA 
SSES 
A(2)A 
IN 
TENT 
A(2)A 
HEAVYLO 
SSES 
A(2)A 
IN 
TENT ION 


A(2)A 
IS 
SUES 
A(2)A 
NONCOMBA 
TANT 
A(2)A 
LO 
SSES 
A(2)A 
ou 
TPUT 


A(2)A 
PA 
SSES 
A(2)A 
PENE 
TRATE 
A(2)A 
POS 
SESSION 
A(2)A 
PENE 
TRATION 


A(2)AA 
PO 
SSESSION 
A(2)A 
PERSIS 
TENT 
A(2)A 
PRO PO 
SALS 
A(2)A 
PRO 
TECT 


A(2)A 
REPRI 
SALS 
A(2)A 
PRO 
TECTED 


A(2)A 
SESSION 
A(2)A 
PRO 
TECTION 


A(2)A(I)A 
SUBSISTENCE 
A(2)A 
PRO 
TECTOR 


A(2)A 
SUBSTITUTE 
A(2)A 
PRO 
TEST 


A(2)A 
.SUBSTITUTION 
A(2)A 
PRO 
TESTED 


A(2)A 
SUNSET 
A(2)A 
PRO 
TESTS 


A(2)AA 
TRAN 
SMISSION 
A(2)A 
REGIS 
TRATION 


A(2)A 
YES 
SELS 
A(2)A 
RE 
TENTION 


A(2)A 
VI 
SITS 
A(2)A 
SI 
TUATION 


A(2)A 
WITNE 
SSES 
A(2)A 
s 
TART 
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A(2)A 
s 
TARTER 
A{3)A 
ESTIM 
ATEDAT 
A(2)A 
STA 
TISTICS 
A(3)A 
EX 
AMINATION 


A(2)A 
s 
TRATEGIC 
A(3)A 
GENER 
ALALARM 
A(2)A 
s 
TRATEGICAL 
A(3)A 
GENER 
ALSTAFF 


A(2)A 
s 
TRATEGY 
A(3)A 
HE 
ADQUARTERS 


A(2)A 
TACTICAL 
A(3)A 
L 
ABORATORY 


A(2)A 
TACTICS 
A(3)A 
L 
ANGUAGE 
A(2)A 
TATOO 
A(3)A 
M 
AINTAIN 
A(2)A 
TENT 
A(3)A 
M 
AINTAINED 
A(2)A(l)A 
TENTATIVE 
A(3)A 
M 
ANUFACTURE 


A(2)A 
TENTH 
A(3)A 
M 
ARSHAL 


A(2)A 
TEXT 
A(3)A 
M 
ARTIAL 
A(2)A 
THAT 
A{3)A 
N 
ATURAL 
A(2)A 
THATHAVE 
A(3)A 
N 
ATURALIZE 
A(2)AA 
THATTHE 
A{3)A 
NATUR 
ALIZATION 


A(2)A 
1WEN 
TIETH 
A(3)A(3)A 
N 
ATURALIZATIO 


A(2)A 
WA 
TERTANK 
A(3)A 
N 
AVIGATION 


A(2)A 
AGRIC 
ULTURAL 
A(3)A 
ORG 
ANIZATION 


A(2)A 
D 
UGOUT 
A(3)A 
p 
ANAMA 
A(2)A 
0 
UTGUARD 
A(3)A 
R 
AIL WAY 


A(2)A 
0 
UTPUT 
A(3)A 
RE 
ARGUARD 
A(2)A 
p 
URSUE 
A(3)A 
RECONN 
AISSANCE 


A(2)A 
p 
URSUIT 
A(3)A 
REORG 
ANIZATION 


A(2)A(6)A 
UNSUCCESSFUL 
. A(3)A 
s 
ABOTAGE 
·A(2)A 
UNSUITABLE 
A(3)A 
s 
ANITARY 
A(2)A 
RE 
VOLVE 
A(3)A 
s 
ANITATION 


A(2)A 
RE 
VOLVER 
A(3)A 
SPE 
ARHEAD 
A(2)A 
AN 
YWAY 
A(3)A 
TR 
ANSPACIFIC 


A(2)A 
ZIGZAG 
A(3)A 
CAPACITY 


A(3)A 
ACTUALLY 
A(3)A 
CHURCH 


A(3)A 
ANIMAL 
A(3)A{4)A 
COINCIDENCE 


A(3)A 
ANNUAL 
A(3)A 
CONSCRIPTION 


A(3)A(4)A 
ANTIAIRCRAFT 
A(3)A 
COUNCIL 


A(3)A 
ANYWAY 
A(3)A 
DEFI 
CIENCY 


A(3)A 
APPEAR 
A(3)A 
EFFI 
CIENCY 


A(3)A(l)A 
APPEARANCE 
A(3)A 
ELE 
CTRICITY 


A(3)A 
APPEARED 
A(3)A 
GYROS 
CO PIC 


A(3)A 
AVERAGE 
A(3)A 
INEFFI 
CIENCY 


A(3)A 
AWKWARD 
A(3)A 
PA 
CIFIC 


A(3)A 
c 
AN ADA 
A(3)A 
SPE 
CIFIC 


A(3)A 
c 
ARRIAGE 
A(3)A 
SPE 
CIFICATION 


A(3)A 
CENTR 
ALIZATION 
A(3)A 
TE 
CHNICAL 


A(3)A 
CIRCUMST 
ANTIAL 
A(3)A 
TRANSPA 
CIFIC 


A(3)A 
DIS 
APPEAR 
A(3)A 
DECIDE 


A(3)A 
DIS 
APPEARED 
A(3)A(l)A 
DECIDED 


A(3)A 
E 
AS1WARD 
A(3)A 
DECODE 


A(3)A 
EL 
ABO RATE 
A(3)A 
DIVIDE 
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A(3)A 
DIVIDING 
A(3)A 
ENV 
ELOPE 


A(3)A 
HIN 
DERED 
A(3)A 
ERASE 


A(3)A 
IN 
DIVIDUAL 
A(3)A 
ERASER 


A(3)A 
MAN 
DATED 
A(3)A 
EXP 
EDITE 
A(3)A 
OR 
DE RED 
A(3)A 
EXP 
ERIMENT 
A(3)A 
RE 
DUCED 
A(3)A 
EXPRESS 
A(3)A 
SURREN 
DE RED 
A(3)A(l)A 
EXTREME 
A(3)A 
WE 
DNESDAY 
A(3)A 
FUS 
ELAGE 
A(3)A 
WIN 
DWARD 
A(3)A 
G 
EORGE 


A(3)A 
ASS 
EMBLE 
A(3)A 
GOV 
ERNMENT 
A(3)A 
ASS 
ESSMENT 
A(3)A 
GR 
ENADE 
A(3)A 
ASS 
ESSMENTS 
A(3)A 
H 
EAVIER 
A(3)A 
ATT 
EMPTED 
A(3)A 
ILLIT 
ERATE 
A(3)A 
AV 
ERAGE 
A(3)A 
IMP 
EDIMENTA 
A(3)AA(l)A 
B 
EENNEEDED 
A(3)A 
INS 
ECURE 
A(3)A(l)A 
BE 
ENNEEDED 
A(3)A 
INT 
ERNMENT 
A(3)A 
B 
EETLE 
A(3)A 
INT 
ERPRETATION 


A(3)A 
B 
EFORE 
A(3)A(l)A 
INT 
ERPRETER 
A(3)A 
B 
ETWEEN 
A(3)A 
INT 
ERVIEW 
A(3)A 
CAREL 
ESSNESS 
A(3)A 
L 
EAGUE 
A(3)A 
c 
EMETERY 
A(3)A 
OP 
ERATE 
A(3)A 
COMPL 
ETENESS 
A(3)A(2)A 
ov 
ERWHELMED 
A(3)A 
CONC 
EALMENT 
A(3)A 
PAR 
ENTHESIS 


A(3)A 
COOP 
ERATE 
A(3)A(l)A 
PAR 
ENTHESES 


A(3)A 
CORR 
ECTNESS 
A(3)A 
PR 
ECEDE 
A(3)A 
D 
ECIDE 
A(3)A(2)A 
PR: 
ECEDENCE 
A(3)A 
D 
ECIDED 
A(3)A(2)A 
PR 
EFERENCE 
A(3)A 
D 
ECODE 
A(3)A 
PR 
EPARE 
A(3)A 
D 
ECREE 
A(3)A(2)A 
PR 
EPAREDNESS 


A(3)A 
D 
EGREE 
A(3)A 
PR 
ESIDENT 


A(3)A 
D 
ELAYED 
A(3)A 
PR 
ESIDENTIAL 


A(3)A 
D 
ELNER 
A(3)A 
PROC 
EDURE 
A(3)A 
DEV 
ELOPE 
A(3)A 
R 
EACHED 
A(3)A 
DEV 
ELOPED 
A(3)A 
R 
ECOVER 


A(3)A 
D 
EVICE 
A(3)A 
R 
EDUCE 
A(3)A 
D 
EVISE 
A(3)A 
R 
EDUCED 
A(3)A 
EASTERLY 
A(3)A(2)A 
R 
EFERENCE 
A(3)A 
EASTERN 
A(3)A 
R 
EFUGE 
A(3)A 
ECH 
ELONED 
A(3)AA 
R 
EFUGEE 
A(3)A 
EITHER 
A(3)A 
R 
EFUSE 


A(3)A 
ELEMENT 
A(3)A 
R 
EGIMENTAL 
A(3)A 
ELEMENTARY 
A(3)A 
R 
EGIMENT 
A(3)A 
EL 
EVATE 
A(3)A 
R 
ESCUE 


A(3)A 
ELEVEN 
A(3)A 
R 
ESUME 
A(3)A 
ENTRENCH 
A(3)A 
R 
ETIRE 
A(3)A(3)A 
ENTRENCHED 
A(3)A 
SCH 
EDULE 
A(3)A 
ENTR 
ENCHED 
A(3)A 
s 
ECURE 
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A(3)A 
s 
ETTLE 
A(3)A 
D 
ISTRIBUTE 


A(3)A 
SEV 
ENTEEN 
A(3)A 
DISTR 
IBUTING 


A(3)A 
SEV 
ENTEENTH 
A(3)A 
DISTR 
IBUTION 


A(3)A 
s 
EVERE 
A(3)A(3)A 
D 
ISTRIBUTING 


A(3)AA 
SMOK 
ESCREEN 
A(3)A(3)A 
D 
ISTRIBUTION 


A(3)A 
SP 
EARHEAD 
A(3)A 
D 
I STRICT 


A(3)A 
THER 
EFORE 
A(3)A 
D 
ISTRICTS 


A(3)A 
TW 
ENTIETH 
A(3)A 
D 
lVI DING 
A(3)A 
w 
EATHER 
A(3)A 
D 
!VISION 


A(3)A 
GARAGE 
A(3)A 
D 
MSIONS 


A(3)A 
GEORGE 
A(3)A 
DOM 
!NATION 


A(3)A 
GOING 
A(3)A 
ENC 
IRCUNG 


A(3)A 
c 
HURCH 
A(3)A 
EST 
IMATION 


A(3)A 
FLAS 
HLIGHT 
A(3)A 
EXAM 
!NATION 


A(3)A 
p 
HOSPHOROUS 
A(3)A 
EXH 
IBITION 


A(3)A 
sc 
HOOLHOUSE 
A(3)A 
EXTERM 
!NATION 


A(3)A 
SEARC 
HLIGHTS 
A(3)A 
EXT 
INGUISH 


A(3)A 
T 
HATTHE 
A(3)A 
FAC 
IUTIES 


A(3)A 
T 
HOUGH 
A(3)A 
F 
IGHTING 
A(3)A 
ACT 
NITIES 
A(3)A 
HOST 
IUTIES 


A(3)A 
ANTIC 
IPATION 
A(3)A 
IDENTIF 
!CATION 


A(3)A 
APPL 
ICATION 
A(3)A 
ILLUM 
INATING 
A(3)A 
ART 
IFICIAL 
A(3)A 
ILLUM 
INATION 


A(3)A 
AUD 
IBIUTY 
A(3)A(l)A 
INCUNING 


A(3)A 
BR 
IGADIER 
A(3)A 
IND 
ICATING 


A(3)A 
CENTRAL 
IZATION 
A(3)A 
IND 
!CATION 


A(3)A 
c 
IRCUIT 
A(3)A 
INFUCT 


A(3)A 
c 
IRCUITOUS 
A(3)A(2)A 
INFUCTING 


A(3)A 
c 
ITATION 
A(3)A 
INITIATE 
A(3)A 
CLASSIF 
!CATION 
A(3)A 
INQUIRE 
A(3)A 
COMMUN 
ICATION 
A(3)A 
INQUIRY 


A(3)A 
CONST 
ITUTING 
A(3)A 
INSP 
!RATION 


A(3)A 
CONST 
ITUTION 
A(3)A(3)A 
INSPIRATION 


A(3)A 
COORD 
!NATION 
A(3)A 
INSPIRE 


A(3)A 
CR 
ITICISE 
A(3)A 
INST 
ITUTION 


A(3)A 
CR 
ITICISM 
A(3)A(3)A 
INSTITUTION 


A(3)A 
DED 
ICATION 
A(3)A 
INVEST 
IGATION 


A(3)A 
DEF 
INITION 
A(3)A 
INVEST 
IGATIONS 


A(3)A 
DEMOBIL 
IZATION 
A(3)A 
INV 
ITATION 
A(3)A 
DETERM 
!NATION 
A(3)A 
IRR 
IGATIONS 


A(3)A 
D 
IMINISH 
A(3)A 
ISSUING 


A(3)A 
D 
IRIGIBLE 
A(3)A 
UM 
ITATION 


A(3)A 
DISSEM 
INATION 
A(3)A 
L 
IMITING 


A(3)A 
DIST 
INCTION 
A(3)A 
MA 
INTAIN 


A(3)A 
DIST 
INGUISH 
A(3)A 
MA 
INTAINED 


A(3)A 
DIST 
INGUISHED 
A(3)A 
M 
IUTIA 


A(3)A(2)A 
DIST 
INGUISHING 
A(3)A 
MOBIL 
IZATION 
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Table D-7 <e). List of words containing like letters repeated at various intervals (U)-Con tinued 


A(3)A 
NATURAL 
IZATION 
A(3)A 
E 
NCOUNTERED 


A(3)A 
NAY 
IGATION 
A(3)A 
E 
NT RENCH 


A(3)A 
ORGAN 
IZATION 
A(3)A 
E 
NTRENCHED 


A(3)A 
PRELIM 
INARIES 
A(3)A 
EXPA 
NSION 


A(3)A 
QUALIF 
I CATION 
A(3)A 
EXTE 
NSION 


A(3)A 
RECONNO 
ITERING 
A(3)A 
ILLUMI 
NATING 
A(3)A 
REORGAN 
IZATION 
A(3)A 
I 
NDEMNITY 


A(3)A 
REQU 
ISITION 
A(3)A 
I 
NSIGNIA 
A(3)A 
RESPONS 
IBIUTY 
A(3)A 
I 
NSTANT 


A(3)A 
SAN 
ITATION 
A(3)A 
I 
NSTANTLY 


A(3)A 
SEM 
!RIGID 
A(3)A(2)A 
I 
NSTANT ANEOUS 


A(3)A 
s 
IGHTING 
A(3)A 
INTE 
NTION 


A(3)A 
SIM 
ILARITY 
A(3)A 
I 
NTERNAL 
A(3)A 
SPEC IF 
!CATION 
A(3)A(4)A 
I 
NTERNA TIONAL 


A(3)A 
SUBST 
ITUTION 
A(3)A(2)A 
I 
NTERNMENT 
A(3)A(l)A 
su 
ITABIUTY 
A(3)A 
INTERVE 
NT ION 


A(3)A 
VERIF 
!CATION 
A(3)A 
I 
NTRENCH 


A(3)A 
VETER 
INARIAN 
A(3)A 
INVE 
NT ION 


A(3)A 
v 
ICINITY 
A(3)A 
LAU 
NCHING 


A(3)A 
VIS 
IBIUTY 
A(3)A 
MACHI 
NEG UN 
A(3)A(l)A 
v 
ISIBIUTY 
A(3)A 
MAl 
NTAIN 
A(3)A 
co 
LONEL 
A(3)A 
MAl 
NTAINED 


A(3)A 
COMP 
LETELY 
A(3)A 
MOU 
NTAIN 
A(3)A 
F 
LASHUGHT 
A(3)A 
NOTING 


A(3)A 
IL 
LEGAL 
A(3)A 
0 
NEHUNDRED 
A(3)A 
LEVEL. 
A(3)A 
PO 
NTOON 


A(3)A 
UTTLE 
A(3)A 
REAP POI 
NTMENT 
A(3)A 
LOCAL 
A(3)A 
RETE 
NTION 


A(3)A 
SEA 
LEVEL 
A(3)A 
SEVE 
NTEEN 
A(3)A 
A 
MUSEMENT 
A(3)A 
SEVE 
NTEENTH 
A(3)A 
co 
MMITMENT 
A(3)A 
SUSPE 
NSION 


A(3)A(l)A 
MAXIMUM 
A(3)A 
u 
NIDENTIFIED 
A(3)A(l)A 
MINIMUM 
A(3)A 
AIRC 
ONTROL 


A(3)A 
MOVEMENT 
A(3)A 
AN 
ONYMOUS 


A(3)A 
ALTER 
NATING 
A(3)A 
CHR 
ONOLOGICAL 


A(3)A(4)A. 
A 
NNOUNCEMENT 
A(3)AA 
c 
ODEBOOK 


A(3)A 
A 
NTENNA 
A(3)A 
c 
ONTROL 


A(3)A 
APPOI 
NTMENT 
A(3)A 
c 
ONTROVERSY 


A(3)A 
ASCE 
NSION 
A(3)A 
CR 
OSSROADS 


A(3)A 
ATTE 
NT ION 
A(3)A 
FIREC 
ONTROL 


A(3)A(l)A 
co 
NCERNING 
A(3)A 
F 
OOTHOLD 


A(3)A 
co 
NDEMN 
A(3)AA 
F 
ORENOON 


A(3)A 
co 
NDEMNED 
A(3)A 
H 
ORIZON 


A(3)A 
CO NFI 
NEMENT 
A(3)A 
LAB 
ORATORY 


A(3)A 
co 
NTAIN 
A(3)A 
L 
OCOMOTIVE 


A(3)A 
DETE 
NT ION 
A(3)A 
METE 
OROLOGICAL 


A(3)A 
DIME 
NSION 
A(3)A 
M 
ONOPOLY 
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A(3)A 
OUTBOARD 
A(3)A 
REA 
RGUARD 
A(3)A 
OUTPOST 
A(3)A 
RECORD 


A(3)A 
OUTPOSTS 
A(3)A(2)A 
RECORDER 


A(3)A 
PH 
OSPHORUS 
A(3)A 
REDCROSS 


A(3)A 
p 
ONTOON 
A(3)A 
REFER 
A(3)A 
p 
OSTPONE 
A(3)A 
REFERENCE 


A(3)A 
PROP 
ORTION 
A(3)A 
REGARDING 
A(3)A 
PR 
OTOCOL 
A(3)A 
REPORT 


A(3)A 
A 
PPROPRIATE 
A(3)A 
REPORTED 


A(3)A 
PASSPORT 
A(3)A 
RESERVATION 


A(3)A 
PHOSPHORUS 
A(3)A 
RESERVE 


A(3)A 
POSTPONE 
A(3)A 
RESERVES 


A(3)A 
PROMPT 
A(3)A 
RESTRAINT 


A(3)A 
TROO 
PSHIP 
A(3)A 
RESTRICTED 


A(3)A 
TROO 
PSHIPS 
A(3)A 
RESTRICTION 


A(3)A 
A 
RBITRATION 
A(3)A 
RETIRE 
A(3)A 
B 
RIBERY 
A(3)A 
RETIRING 
A(3)A 
CA 
RRIER 
A(3)A 
RETURN 
A(3)A 
CONT 
ROVERSY 
A(3)A 
RETURNED 
A(3)A 
COR 
RIDOR 
A(3)A 
RETURNING 
A(3)A 
c 
ROSS ROADS 
A(3)A 
REVERSE 


A(3)A 
DEST 
ROYERS 
A(3)A 
RIGOROUS 


A(3)A 
DEST 
ROYER 
A(3)A 
RIVER 
A(3)A 
E 
RASER 
A(3)A 
ROGER 


A(3)A 
FA 
RTHER 
A(3)A 
SEC 
RETARY 


A(3)A 
FU 
RTHER 
A(3)A 
TEMPE 
RATURE 
A(3)A 
IMP 
ROPER 
A(3)A 
TER 
RITORY 


A(3)A 
INTERP 
RETER 
A(3)A 
THE 
REFORE 


A(3)A 
LABO 
RATORY 
A(3)A 
T 
RAVERSE 
A(3)A 
NO 
RTHERN 
A(3)A 
VETE 
RINARIAN 
A(3)A 
NO 
RTHERLY 
A(3)A 
A 
SCENSION 


A(3)A 
OPE 
RATOR 
A(3)A 
A 
SPOSSIBLE 


A(3)A 
p 
REARRANGED 
A(3)A 
A 
SSESSMENT 


A(3)A 
p 
REFER 
A(3)A(4)A 
A 
SSESSMENTS 


A(3)A 
p 
REFERENCE 
I A(3)A 
A 
SSETS 


A(3)AA 
p 
REFERRED 
A(3)A 
BALLI 
STICS 


A(3)A 
p 
REPARATION 
A(3}A 
BATTLE 
SHIPS 


A(3)A 
p 
REP ARE 
A(3)AA 
BU 
SINESS 


A(3)A 
p 
REPAREDNESS 
A(3)AA 
CARELE 
SSNESS 


A(3)A 
p 
REPARING 
A(3)A 
CARELES 
SNESS 


A(3)A 
p 
RESCRIBED 
A(3)A 
COLLI 
SIONS 


A(3)A 
p 
RESERVATION 
A(3)A 
Dl scuss 
A(3)A 
p 
RESERVE 
A(3)A 
Dl 
SCUSSED 


A(3)A 
p 
RIMARY 
A(3)A 
Dl 
SCUSSION 


A(3)A 
p 
ROPER 
A(3)A 
Dl 
SMISSAL 


A(3)A 
p 
ROPORTION 
A(3)A 
DI 
SMISS 


A(3)A 
RAILROAD 
A(3)A 
DI 
SPERSE 
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A(3)A 
DI 
SPERSED 
A(3)A 
DEPAR 
TMENTAL 
A(3)A 
DI. 
SPERSION 
A(3)A 
DES 
TIT UTE 
A(3)AA 
·oi 
STRESS 
A(3)A 
DES 
TRUCTION 


A(3)AA 
DI 
STRESSED 
A(3)A 
DE 
TO NATE 
A(3)A 
DIVI 
SIONS 
A(3)A 
DE 
TONATED 


A(3)A 
EMBA 
SSIES 
A(3)A 
DE 
TONATION 


A(3)A 
EXPLO 
SIONS 
A(3)A 
DIS 
TINCTION 


A(3)A 
I 
SSUES 
A(3)A 
DIS 
TRICT 


A(3)A 
LOGI 
STICS 
A(3)A 
DIS 
TRICTS 


A(3)A 
MARK 
SMANSHIP 
A(3)A 
EIGH 
TEE NTH 
A(3)A 
MES 
SAGES 
A(3)A 
ENLIS 
TMENT 
A(3)A 
MIS 
SIONS 
A(3)A 
ES 
TIMATE 
A(3)A 
PO 
SSESSION 
A(3)A 
ES 
TIMATION 


A(3)A 
PRO VI 
SIONS 
A(3)A 
ESTIMA 
TEDAT 
A(3)A 
RE 
SPONSIBLE 
A(3)A 
ES 
TIMATES 


A(3)A 
RE 
SPONSIBILITY 
A(3)A(3)A 
ES 
TIMATEDAT 
A(3)A 
SATISFACTORY 
A(3)A 
EX 
TRACT 


A(3)A 
SATISFY 
A(3)A 
FA 
TALITY 
A(3)A 
SHIPS 
A(3)A 
FIF 
TEENTH 
A(3)A 
STATI 
STICS 
A(3)A 
FOUR 
TEENTH 
A(3)AA 
STRESS 
A(3)A 
HOS 
TILITY 
A(3)A 
su 
SPENSE 
A(3)A 
HOS 
TILITIES 
A(3)A 
su 
SPENSION 
A(3)A 
ILLI 
TERATE 
A(3)A 
TRAN 
SMISSION 
A(3)A 
INS 
TITUTION 


A(3)A 
TRAN 
SVERSE 
A(3)A 
INS 
TRUCT 


A(3)A. 
TROOP 
SHIPS 
A(3)A 
INS 
TRUCTION 


A(3)AA 
u 
SELESS 
A(3)A 
INS 
TRUCTIONS 


A(3)A 
VE 
SSELS 
A(3)A 
INS 
TRUCTOR 


A(3)A 
WAR 
SHIPS 
A(3)A 
INVES 
TIGATE 
A(3)A 
AC 
TIVITY 
A(3)A 
INVES 
TIGATION 


A(3)A 
AC 
TIVITIES 
A(3)A 
INVES 
TIGATIONS 


A(3)A 
ALLO 
TMENT 
A(3)A 
NINE 
TEENTH 
A(3)A 
AN 
TEDATING 
A(3)A 
OBS 
TRUCTIONS 


A(3)A 
APPOIN 
TMENT 
A(3)A 
ou 
TPOST 


A(3)A 
A 
TLANTIC 
A(3)A 
ou 
TPOSTS 


A(3)A 
AT 
TEMPT 
A(3)A 
PA 
TRIOTIC 


A(3)A 
AT 
TEMPTED 
A(3)A 
REAPPOIN 
TMENT 
A(3)A 
A 
TTENTION 
A(3)A 
RECONS 
TRUCTION 


A(3)A 
AU 
TOMATIC 
A(3)A 
REENLIS 
TMENT 
A(3)A 
COMMI 
TMENT 
A(3)A 
RES 
TRICTED 
A(3)A 
COMPAR 
TMENT 
A(3)A 
RES 
TRICTION 


A(3)A 
CONS 
TIT UTE 
A(3)A 
RE 
TREAT 
A(3)A 
CONS 
TITUTION 
A(3)A 
SEVEN 
TEE NTH 
A(3)A 
CONS 
TRUCTION 
A(3)A 
SIX 
TEE NTH 
A(3)A 
CON 
TRACT 
A(3)A 
s 
TREET 
A(3)AA 
COUN 
TERATTACK 
A(3)A 
SUBS 
TIT UTE 
A(3)A 
DEPAR 
TMENT 
A(3)A 
SUBS 
TITUTION 
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A(3)A 
TAXATION 
A(4)A 
GEOGR 
APHICAL 


A(3)A 
THATTHE 
A(4)A 
IMPR 
ACTICABLE 


A(3)A 
THIRTEEN 
A(4)A 
IN 
AUGURATION 


A(3)A 
THIR . TEENTH 
A(4)A 
INTERN 
ATIONAL 
A(3)A(3)A 
THIRTEENTH 
A(4)A 
M 
ARKSMANSHIP 


A(3)A 
THIRTY 
A(4)A 
M 
ATERIAL 
A(3)A 
TRACT 
A(4)A 
N 
ATIONAL 
A(3)A 
TRACTOR 
A(4)A 
N 
ATIONALISM 


A(3)A 
TRANSA 
TLANTIC 
A(4)A 
N 
ATIONALITY 
A(3)A(2)A 
1WENTIETH 
A(4)A 
N 
A UTI CAL 


A(3)A 
1WENTY 
A(4)A 
NAV 
ALATTACK 


A(3)A 
1WENTYFIVE 
A(4)A 
N 
AVALBASE 


A(3)A(l)A 
UNI 
TEDSTATES 
A(4)A 
N 
AVALBATTLE 
A(3)A 
u 
TILITY 
A(4)A 
p 
ARAGRAPH 
A(3)A 
WARDEPAR 
TMENT 
A(4)A 
p 
ARALLAX 
A(3)A 
WI 
THOUT 
A(4)A 
PR 
ACTICAL 


A(3)A 
B 
UREAU 
A(4)A 
R 
AILHEAD 
A(3)A 
CHA 
UFFEUR 
A(4)A 
R 
AILROAD 
A(3)A 
CIRC 
UITOUS 
A(4)A 
RECRE 
ATIONAL 
A(3)A 
COMM 
UNIQUE 
A(4)A 
s 
ATISFACTORY 


A(3)A 
s 
URPLUS 
A(4)A 
s 
ATURDAY 
A(3)A 
s 
URROUND 
A(4)A 
T 
ACTICAL 


A(3)A 
UNUSUAL 
A(4)A 
w ARDEPARMENT 
A(3)A 
WESTWARD 
A(4)A 
w ATERTANK 


I A(3)A 
WINDWARD 
A(4)A 
BLOCKBUSTER 


A(4)A 
ADJUTANT 
A(4)A 
CHARACTER 


A(4)A 
AERONAUTICS 
A(4)A(7)A 
CHARACTERISTIC 


A(4)A 
AIRCRAFT 
A(4)A 
CHEMICAL 


A(4)A 
AIRPLANE 
A(4)A 
CLERICAL 


A(4)A 
ALASKA 
A(4)A 
COIN 
CIDENCE 


A(4)A 
ALLOCATION 
A(4)A 
COLLECT 


A(4)A 
ALLOWANCE 
A(4)A 
COLLECTION 


A(4)A 
ALMANAC 
A(4)A 
CONDUCT 


A(4)A 
AMBULANCE 
A(4)A 
CONNECTING 


A(4)A 
ANTEDATING 
A(4)A 
CONNECTION 


A(4)A 
ANTI 
AIRCRAFT 
A(4)A 
CONTACT 


A(4)A 
ANTITANK 
A(4)A 
CORRECTED 


A(4)A 
APPARATUS 
A(4)A 
CORRECTION 


A(4)A 
APPROACH 
A(4)A 
CORRECTNESS 


A(4)A 
ARABIA 
A(4)A 
CORRECT 


A(4)A 
ARRIVAL 
A(4)A 
CRITIC 


A(4)A 
ASSURANCE 
A(4)A 
CRITICAL 


A(4)A 
AUTOMATIC 
A(4)A 
CRITICISE 


A(4)A 
AVAILABLE 
A(4)A 
IN 
CIDENCE 


A(4)A 
BE 
ACHHEAD 
A(4)A 
ME 
CHANIC 


A(4)A 
c 
AUSEWAY 
A(4)A 
PRE 
CEDENCE 


A(4)A 
co 
ASTGUARD 
A(4)A 
RE 
CEPTACLE 
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A(4)A 
CRITICISM 
A(4)A 
D 
ESERTED 


A(4)A 
CON 
DEMNED 
A(4)A 
D 
ESERTER 


A(4)A 
CON 
DEN SED 
A(4)A 
D 
ETACHED 


A(4)A 
·DEFEND 
A(4)A 
DET 
ERMINE 
A(4)A 
DEFENDER 
A(4)A 
DET 
ERMINED 
A(4)A(l)A 
DEFENDED 
A(4)A 
DEV 
ELOPMENT 
A(4)A(I)A 
DEMANDED 
A(4)A 
DIFF 
ERENCE 


A(4)A 
DEPEND 
A(4)A 
DIV 
EBOMBER 
A(4)A 
DEPENDABLE 
A(4)A 
ECH 
ELONMENT 
A(4)A 
DEPENDABILITY 
A(4)A 
EFF 
ECTIVE 


A(4)A 
DEPENDENT 
A(4)AA 
EIGHTEEN 
A(4)A 
DISLODGE 
A(4)AA 
EIGHTEENTH 
A(4)A 
DOWNED 
A(4)A 
ELS 
EWHERE 
A(4)A 
IN 
DEPENDENT 
A(4)A 
EMERGENCY 


A(4)A 
ALT 
ERNATE 
A(4)A 
ENCODE 


A(4)A 
ASS 
EMBLIES 
A(4)A 
ENCODED 


A(4)A 
B 
EACHHEAD 
A(4)A 
ENEMIES 


A(4)A 
B 
ECAUSE 
A(4)A 
ENGAGE 
A(4)A(l)A 
B 
EENNEEDED 
A(4)A(l)A 
ENGAGEMENT 
A(4)A(l)A 
B 
ELUGERENT 
A(4)A 
ENGINE 
A(4)A 
B 
ESIEGED 
A(4)AA 
ENGINEER 
A(4)A 
c 
ENTERED 
A(4)AA 
ENGINEERING 
A(4)A 
COMM 
EN CEMENT 
A(4)A 
ENTIRE 
A(4)A 
COMP 
ENSATE 
A(4)A 
EUROPE 


A(4)A 
CONF 
ERENCE 
A(4)A 
EUROPEAN 


A(4)A 
CON SID 
ERABLE 
A(4)A 
EXC 
ESSIVE 


A(4)A 
D 
ECEMBER 
A(4)A 
EXCITE 


A(4)A 
D 
ECIPHER 
A(4)A(l)A 
EXCITEMENT 


A(4)A(l)A 
D 
ECIPHERED 
A(4)A 
EX 
ERCISE 


A(4)A(2)A 
D 
ECIPHERMENT 
A(4)A 
EX 
ERCISES 


A(4)A 
D 
ECLARE 
A(4)A 
EXP 
ENSIVE 


A(4)A 
D 
ECLARED 
A(4)A 
EXT 
ENSIVE 


A(4)A 
D 
EFEATED 
A(4)A 
FL 
EXIBLE 
A(4)A 
DEF 
ECTIVE 
A(4)A 
IMM 
EDIATE 
A(4)A 
D 
EFENDER 
A(4)A 
IMPR 
ESSIVE 


A(4)A 
D 
EFENDED 
A(4)A 
INC 
ENTIVE 
A(4)A 
D 
EFENSE 
A(4)A 
INCOMP 
ETENCE 


A(4)A 
D 
EFENSES 
A(4)A 
IND 
EPENDENT 
A(4)A 
DEF 
ENSIVE 
A(4)A 
INT 
ELLIGENT 
A(4)A 
D 
EFERRED 
A(4)A(2)A 
INT 
ELLIGENCE 


A(4)A 
D 
EFICIENT 
A(4)A 
INT 
ENSIVE 


A(4)A 
D 
EFICIENCY 
A(4)A 
INTERF 
ERENCE 


A(4)A 
D 
EMANDED. 
A(4)A 
INT 
ERFERE 
A(4)A 
D 
EPARTED 
A(4)A(2)A 
INT 
ERFERENCE 


A(4)A 
D 
EPENDENT 
A(4)A 
INTERM 
EDIATE 
A(4)A 
D 
EPLOYED 
A(4)A 
INT 
ERPOSE 


A(4)A 
D 
EPORTED 
A(4)A 
INT 
ERVENE 
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A(4)A 
L 
ECTURE 
A(4)A 
R 
EQUIRE 
A(4)A 
L 
ETTERED 
A(4)A(I)A 
R 
EQUIREMENT 
A(4)A 
MAINT 
ENANCE 
A(4)A 
R 
ESERVE 


A(4)A(l)A 
M EASUREMENT 
A(4)A 
R 
ESERVES 


A(4)A(l)A 
M EASUREMENTS 
A(4)A 
R 
ESTORED 


A(4)A 
M ESSAGE 
A(4)A 
R 
ETURNED 
A(4)A 
M ESSAGES 
A(4)A 
R 
EVENUE 
A(4)A 
MISC 
ELLANEOUS 
A(4)A 
R 
EVERSE 


A(4)A 
N EGLIGENT 
A(4)A 
R 
EVIEWED 
A(4)A(2)A 
N EGLIGENCE 
A(4)A 
R 
EVOLVE 


A(4)A 
OBJ 
ECTIVE 
A(4)A 
R 
EVOLVER 


A(4)A 
OFF 
ENSIVE 
A(4)A 
s EALEVEL 
A(4)A 
PEN ETRATE 
A(4)A 
s ELECTED 


A(4)A 
P ERMANENT 
A(4)A 
s ENTINEL 
A(4)A 
PREC 
EDENCE 
A(4)A 
s ERVICE 


A(4)A 
PREF 
ERENCE 
A(4)AA 
s EVENTEEN 
A(4)A 
PR EFERRED 
A(4)AA 
s EVENTEENTH 
A(4)A 
PR 
ESERVE 
A(4)A 
SMOK 
ESCREEN 


A(4)A 
PR 
ESSURE 
A(4)A 
succ 
ESSIVE 


A(4)A 
PROGR 
ESSIVE 
A(4)A 
SURR 
ENDERED 
A(4)A 
RANG 
EFINDER 
A(4)A 
TEL EPHONE 


A(4)A 
R 
EADINESS 
A(4)A(l)A 
TH 
ERMOMETER 


A(4)A 
R 
ECEIVE 
A(4)A 
THR 
EATENED 
A(4)A 
R 
ECEIVER 
A(4)A 
UNT 
ENABLE 
A(4)A . 
R 
ECOMMEND 
A(4)A 
V 
EHICLES 


A(4)A 
R 
ECOMMENDATION 
A(4)A 
FORTIFIED 


A(4)A(2)A 
R ECOMMENDED 
A(4)A 
EN 
GAGING 
A(4)A 
R 
ECORDER 
A(4)A 
Fl GHTING 
A(4)A 
REF 
ERENCE 
A(4)A 
SI 
GHTING 
A(4)A 
R 
EFUGEE 
A(4)A 
BREAKT 
HROUGH 


A(4)A 
R 
EGISTER 
A(4)A 
s HARPSHOOTER 


A(4)A 
R 
EJECTED 
A(4)A 
T 
HROUGH 


A(4)A 
R 
ELEASE 
A(4)A 
ARB 
ITRATION 


A(4)A 
R 
ELIEVE 
A(4)A 
CONC 
ILIA TION 


A(4)A 
R 
EMEDIES 
A(4)A 
CONF 
IDENTIAL 
A(4)A 
R 
EMEMBER 
A(4)A 
CONF 
IRMATION 


A(4)A 
R 
EPAIRED 
A(4)A 
CONF 
ISCATION 


A(4)A 
R 
EPEATED 
A(4)A 
CONT 
INUATION 


A(4)A 
R 
EPEATER 
A(4)A 
DES 
IGNATION 


A(4)A 
R 
EPELLED 
A(4)A 
D 
IETITIAN 
A(4)A 
R 
EPLACE 
A(4)A 
DIFF ICULTIES 


A(4)A(l)A 
R 
EPLACEMENT 
A(4)A 
D 
IMENSION 


A(4)A 
R 
EPORTED 
A(4)A 
D 
IRECTION 


A(4)A 
R 
EPRESENT 
A(4)A(l)A 
D 
ISPOSITION 


A(4)A 
R 
EPRESENTATION 
A(4)A 
D 
ISSEMINATED 


A(4)A(6)A 
R 
EPRESENT ATIVE 
A(4)A(3)A 
D 
ISSEMINATION 


A(4)A 
R 
EPULSED 
A(4)A 
ENG 
INEERING 
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Table D-7 ((). List of words containing like letters repeated at various intervals (U) -Continued 


A(4)A 
IDENTICAL 
A(4)A 
ANNOU 
NCEMENT 
A(4)A 
IDENTIFY 
A(4)A 
A 
NTITANK 
A(4)A(l)A(3)A 
IDENTIFICATION 
A(4)A 
ARRA 
NGEMENT 
A(4)A 
IGNITION 
A(4)A 
CE 
NTERING 
A(4)A 
ILLUMINATE 
A(4)A 
COl 
NCIDENCE 
A(4)A(3)A 
ILLUMINATING 
A(4)A 
COMME 
NCEMENT 
A(4)A(3)A 
ILLUMINATION 
A(4)A 
co 
NFERENCE 
A(4)A 
IMMEDIATE 
A(4)A 
co 
NFIDENCE 
A(4)A 
IMM 
IGRATION 
A(4)A 
co 
NFIDENT 
A(4)A 
IMPEDIMENT A 
A(4)A 
co 
NFIDENTIAL 
A(4)A 
INDIVIDUAL 
A(4)A 
CON 
NECTING 
A(4)A(l)A 
INEFFICIENCY 
A(4)A 
co 
NTINENTAL 
A(4)A 
INHABITED 
A(4)A 
COORD I 
NATION 
A(4)A 
INTERIOR 
A(4)A 
DEFI 
NITION 


A(4)A 
INVADING 
A(4)A 
DESIG 
NATION 
A(4)A 
INVASION 
A(4)A 
DETERMI 
NATION 
A(4)A 
LEG 
ISLATION 
A(4)A 
DETO 
NATION 
A(4)A 
L 
lABILITY 
A(4)A 
DIS SEMI 
NATION 
A(4)A 
NAT 
IONALISM 
A(4)A 
DISTI 
NCTION 
A(4)A 
NAT 
IONALITY 
A(4)A 
DOMI 
NATION 
A(4)A 
PH 
ILIPPINES 
A(4)A 
E 
NDURANCE 


A(4)A 
PRES 
IDENTIAL 
A(4)A 
E 
NGAGING 
A(4)A 
RES 
IGNATION 
A(4)A 
ENGI 
NEE RING 


A(4)A 
s 
IGNIFICANT 
A(4)A 
E 
NTERING 
A(4)A 
s 
IGNIFICANCE 
A(4)A 
E 
NT RAIN 
A(4)A 
s ITUATION 
A(4)A 
E 
NTRAINED 
A(4)A(l)A 
UN 
IDENTIFIED 
A(4)A 
EXAMI 
NATION 
A(4)A 
v 
ICTORIOUS. 
A(4)A 
EXPLA 
NATION 
A(4)A 
AGRICU 
LTURAL 
A(4)A 
EXTERMI 
NATION 
A(4)A 
BATT 
LEFIELD 
A(4)A 
IG 
NITION 
A(4)A 
E 
LIGIBLE 
A(4)A 
ILLUMI 
NATION 
A(4)A 
F 
LEXIBLE 
A(4)A 
I 
NCIDENT 
A(4)A 
I 
LLEGAL 
A(4)A 
I 
NCIDENCE 
A(4)A 
LEGISLATION 
A(4)A(2)A 
I 
NDEPENDENT 
A(4)A 
LIABILITY 
A(4)A 
I 
NFLUENCE 


A(4)A 
NAVA 
LBATTLE 
A(4)A 
INTER 
NATIONAL 
A(4)A 
ATO 
MICBOMB 
A(4)A 
I 
NVADING 
A(4)A 
BO 
MBARDMENT 
A(4)A 
JU 
NCTION 
A(4)A 
COM 
MEN CEMENT 
A(4)A 
MAl 
NTENANCE 
A(4)A 
co 
MPARTMENT 
A(4)A 
MU 
NITIONS 


A(4)A 
E 
MPLOYMENT 
A(4)A 
NATIONALITY 
A(4)A 
I 
MPEDIMENTA 
A(4)A 
NATIONAL 
A(4)A 
MARKSMANSHIP 
A(4)A 
NATIONALISM 
A(4)A 
MEDIUM 
A(4)A 
NI 
NETEEN 
A(4)A(2)A 
MEDIUMBOMBER 
A(4)A 
Nl 
NETEENTH 
A(4)A 
MILLIMETER 
A(4)A 
NOTHING 
A(4)A 
AMMU 
NITION 
A(4)A 
RA 
NGEFINDER 


- C.nNFIBF!:NTI4L 
- 
D-79 


CONFIDENTIAL 


Table D-7 {¢). List of words containing like letters repeated at various intervals (U) -Continued 


A(4)A 
RECOG 
NITION 
A(4)A 
EXTRAO 
RDINARY 
A(4)A 
RESIG 
NATION 
A(4)A 
FI 
REALARM 
A(4)A 
ROADJU 
NCTION 
A(4)A 
INST 
RUCTOR 


A{4)A 
SIG 
NALLING 
A{4)A 
NO 
RTHWARD 
A{4)A 
SY 
NCHRONIZE 
A(4)A 
p 
REFERRED 
A{4)A 
u 
NEXPENDED 
A{4)A 
p 
RESSURE 
· A{4)A 
u 
NKNOWN 
A(4)A 
REPAIR 


A{4)A 
VETERI 
NARIAN 
A(4)A 
REPAIRED 
A{4)A 
ACCOMM 
ODATION 
A{4)A 
REQUIRE 
A(4)A 
ALL 
OCATION 
A(4)A 
REQUIREMENT 
A{4)A 
AT 
OMICBOMB 
A(4)A 
REQUIRING 
A(4)A 
c 
ODEBOOK 
A(4)A 
RESEARCH 


A(4)A 
COMP 
OSITION 
A(4)A 
RESOURCES 


A{4)A 
CORP 
ORATION 
A(4)A 
RESTORED 


A(4)A 
c 
ORRIDOR 
A(4)A 
RUBBER 


A(4)A 
DEC 
ORATION 
A(4)A 
RUNNER 
. A(4)A 
DET 
ONATION 
A(4)A 
SUR 
RENDER 
A(4)A 
DISP 
OSITION 
A{4)A 
SUR 
RENDERED 
A{4)A 
F 
ORENOON 
A(4)A 
TE 
RRITORY 


A(4)A 
INTR 
ODUCTORY 
A(4)A 
T 
RACTOR 


A(4)A 
L 
OCATION 
A(4)A 
T 
RAILERS 


A(4)A 
OPINION 
A(4)A 
T 
RAWLER 
A(4)A 
OPP 
OSITION 
A{4)A 
T 
RIGGER 
A(4)A . 
OVERCOMING 
A(4)A 
WA 
RDEPARTMENT 
A{4)A 
p 
OSITION 
A{4)A 
ASSES 
SMENTS 


A(4)A 
p 
OSITIONS 
A(4)A 
AS 
SOON AS 


A(4)A 
PR 
OJ ECTOR 
A(4)A 
BU 
SINESS 


A(4)A 
PR 
OMOri ON 
A(4)A 
CARELE 
SSNESS 


A(4)A 
PR 
OTECTOR 
A{4)A 
CROS 
SROADS 


A{4)A 
PR 
OVISION 
A(4)A 
DI 
STRESS 


A{4)A 
PR 
OVISIONS 
A(4)A 
DI 
STRESSED 


A(4)A 
REV 
OLUTION 
A(4)A 
I 
SLANDS 


A{4)A 
REV 
OLUTIONARY 
A(4)A 
ME 
SSAGES 


A{4)A 
T 
OBACCO 
A{4)A 
MI 
SFIRES 


A{4)A 
T 
OMORROW 
'A{4)A 
MI 
SSIONS 


A{4)A 
T 
ORPEDO 
A{4)A 
OUT 
SKIRTS 


A{4)AA 
PHILIPPINES 
A{4)A 
PRI 
SONERS 


A(4)A 
TO 
POGRAPHIC 
A{4)A 
RE 
SERVES 


A{4)A 
AI 
RCONTROL 
A{4)A 
RE 
SPECTS 


A{4)A 
ARMO 
REDCAR 
A{4)A 
SHARPSHOOTER 


A(4)A 
CHA 
RACTER 
A(4)A 
SHELLS 


A(4)A 
CHA 
RACTERISTIC 
A(4)A 
SMOKESCREEN 


A(4)A 
Cl 
RCULAR 
A{4)A 
SPOOLS 


A(4)A 
co 
RRIDOR 
A(4)A 
SPOONS 


A{4)A 
c 
RUISER 
A(4)A 
STATES 


A{4)A 
c 
RUISERS 
A{4)A(3)A 
STATISTICS 


A{4)A 
DI 
RECTOR 
A(4)A 
STATUS 
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Table D-7 ~· List of words containing like letters repeated at various intervals (U) -continued 


A(4)A 
STRESS 
A(4)A 
TARGET 
A(4)A 
STRIPS 
A(4)A 
TENTATIVE 
A(4)AA 
SUBMISSION 
A(4)A 
TERRITORY 


A(4)A 
SUBSISTENCE 
A(4)A 
THREAT 
A(4)AA 
SUCCESSIVE 
A(4)A 
THREATENED 
A(4)AA 
SUCCESS 
A(4)A 
TRADITIONAL 
A(4)AA 
SUCCESSFUL 
A(4)A 
TURRET 
A(4)AA 
SUCCESSFULLY 
A(4)A 
TWELFTH 
A(4)A 
SUGGEST 
A(4)A 
L 
UMINOUS 


A(4)A 
SUNRISE 
A(4)A 
MAN 
UFACTURE 


A(4)A 
SUPPOSE 
A(S)A 
ACCEPTANCE 


A(4)A 
TRAN 
SPORTS 
A(S)A 
ACCEPTABLE 


A(4)A 
UNITED 
STATES 
A(S)A 
ACCOMPANY 


A(4)AA 
UN 
SUCCESSFUL 
A(S)A 
ACCORDANCE 


A(4)A 
u 
SELESS 
A(S)A 
ADVANTAGEOUS 


A(4)A 
AL 
TERNATING 
A(S)A 
AD V Al\'T AGE 
A(4)A 
AL 
TERNATE 
A(S)A 
AEROPLANE 
A(4)A 
A 
TTEMPT 
A(S)A 
ALLEGIANCE 


A(4)A 
A 
!TEMPTED 
A(S)A 
ALTERNATING 
A(4)A 
CHARAC 
TERISTIC 
A(S)A 
ALTERNATE 
A(4)A 
CON 
TINENTAL 
A(S)A 
AMBASSADOR 


A(4)A 
CON 
TINUATION 
A(S)A 
AMERICAN 


A(4)A 
COUN 
TERATTACK 
A(S)A 
ANTENNA 
A(4)A 
DIS 
TRIBUTE 
A(S)A 
APPEARANCE 


A(4)A 
DIS 
TRIBUTION 
A(S)A 
APPLICATION 


A(4)A 
DIS 
TRlBUTING 
A(S)A 
APPROVAL 


A(4)A 
ELEC 
TRICITY 
A(S)A 
ARBITRARY 
A(4)A 
EXCI 
TEMENT 
A(S)A 
ARBITRATION 
A(4)A 
INS 
TALLATIONS 
A(S)A 
ASSISTANT 


A(4)A 
IN 
TEGRITY 
A(S)A 
ASSISTANCE 


A(4)A 
IN 
TEREST 
A(S)A 
ASSOCIATE 


A(4)A 
IN 
TERESTING 
A(S)A 
ASSOCIATION 


A(4)A 
IN 
TERNATIONAL 
A(S)A 
ASSOONAS 


A(4)A 
LIEU 
TENANT 
A(S)A 
c 
ABLE GRAM 
A(4)A 
NOR 
THEAST 
A(S)A 
c 
AMOUFLAGE 


A(4)A 
NOR 
THWEST 
A(S)A 
c 
ANCELLATION 


A(4)A 
NOR 
THWESTERN 
A(S)A 
DIS 
APPEARANCE 


A(4)A 
ou 
!SKIRTS 
A(S)A 
EXTR 
AORDINARY 


A(4)A 
REINSTA 
TEMENT 
A(S)A 
M 
AINTENANCE 


A(4)A 
RES 
TRAINT 
A(S)A 
QU 
ALIFICATION 


A(4)A 
RE 
TALIATION 
A(S)A 
QU 
ARTERMASTER 
A(4)A 
RE 
TROACTIVE 
A(S)A 
R 
ADIOGRAM 


A(4)A 
sou 
THEAST 
A(S)A 
R 
AD lOST A TION 
A(4)A 
sou 
THWEST 
A(S)A 
STR 
ATEGICAL 


A(4)A 
sou 
THWESTERN 
A(S)A 
TR 
ANSATLANTIC 


A(4)A 
STA 
TEMENT 
A(S)A 
AC 
CEPTANCE 


A(4)A 
s 
TATISTICS 
A(S)A 
AC 
CORDANCE 
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Table D-7 (V>. List of words containing like letters repeated at various intervals (U) -Continued 


A(S)A 
CHRONICLE 
A(S)A 
DISCR 
EPANCIES 


A(5)A 
COEFFICIENT 
A(S)A 
DISS 
EMINA TED 
A(S)A 
COMMENCE 
A(S)A 
EFFECTED 


A(S)A 
COMMENCEMENT 
A(S)A 
EFFICIENT 


A(S)A 
COMMERCE 
A(S)A 
EFFICIENCY 


A(S)A 
CONFISCATION 
A(S)A 
EIGHTEEN 
A(S)A 
CONFLICT 
A(S)A 
EIGHTEENTH 
A(S)A 
CONTACT 
A(S)A 
ELEVATE 
A(S)A 
DIS 
CREPANCIES 
A(S)A(l)A 
ELSEWHERE 
A(S)A 
DIS 
CREPANCY 
A(S)A(l)A 
EMPLACEMENT 


A(S)A 
E 
CO NOMIC 
A(S)AA 
EMPLOYEE 
A(S)A 
AD 
DRESSED 
A(S)A 
EMPLOYER 


A(S)A 
A 
DVANCED 
A(S)A(2)A 
ENCIPHERMENT 


A(S)A 
BRI 
DGEHEAD 
A(S)A(l)A 
ENCIPHERED 


A(S)A 
DAMAGED 
A(S)A 
ENCIPHER 


A(S)A 
DECIDED 
A(S)A(l)A 
ENFORCEMENT 


A(S)A 
DELAYED 
A(S)A 
ENFORCE 


A(S)A 
DROPPED 
A(S)A 
ENGINEER 
A(S)A 
IN 
DICATED 
A(S)A 
ENGINEERING 
A(S)A 
ACC 
EPTANCE 
A(S)A 
ENLISTED 
A(S)A 
ACC 
EPTABLE 
A(S)A 
ENROLLED 


A(S)A 
ALL 
EGIANCE 
A(S)A 
ENTENTE 
A(S)A 
APP 
EARANCE 
A(S)A 
ENT 
ERPRISE 


A(S)A 
CAR 
ELESSNESS 
A(S)A 
EQUIPMENT 
A(S)A 
CL 
EARANCE 
A(S)A 
ESCORTED· 


A(S)A 
co 
EFFICIENT 
A(S)A 
EXCLUDE 


A(S)A 
CONC 
ENTRATE 
A(S)A 
EX 
ECUTIVE 


A(S)A(2)A 
CORR 
ESPONDENCE 
A(S)A 
EXPANDED 
A(S)A 
D 
ECREASE 
A(S)A 
EXPELLED 
A(S)A 
D 
ECREASED 
A(S)A 
EXPENDED 
A(S)A 
D 
EDICATE 
A(S)A 
EXPENSES 


A(S)A 
D 
EFINITE 
A(S)A 
EXP 
ERIENCE 


A(S)A 
D 
EPARTMENT 
A(5)A(2)A 
EXPERIENCE 


A(S)A 
D 
EPARTMENTAL 
A(S)A 
EXTENDED 
A(S)A 
DEP 
END ABLE 
A(S)A 
EXTREME 
A(S)A 
D 
EPLOYMENT 
A(S)A 
FIGHT 
ERPLANE 
A(S)A 
D 
ESCRIBE 
A(S)A 
IN 
EFFICIENCY 


A(S)A 
D 
ESC RIB ED 
A(S)A 
INT 
ERCEPTED 


A(S)A 
D 
ESTROYERS 
A(S)A 
INT 
ERPRETER 
A(S)A 
D 
ESTROYED 
A(S)A 
INT 
ERRUPTED 
A(S)A 
D 
ESTROYER 
A(S)A 
J 
ETPLANE 
A(S)A 
D 
ETACHMENT 
A(S)A 
M 
EDICINE 


A(S)A 
D 
ETONATE 
A(S)A 
M 
ESSENGER 


A(S)A 
D 
ETONATED 
A(S)A 
N 
EWSPAPER 


A(S)A 
D 
ETRAINED 
A(S)A 
N 
EWSPAPERS 


A(S)A 
D 
EVELOPED 
A(S)A 
ON 
EHUNDRED 
A(S)A 
DISAPP 
EARANCE 
A(S)A 
PAR 
EN THESES 
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Table D-7 Ji). List of words containing like letters repeated at various intervals (U) -Continued 


A(S)A 
p 
ERSISTENT 
A(S)A 
INCENTIVE 


A(S)A 
p 
ERSONNEL 
A(S)A 
INCLINING 


A(S)A 
PR 
EMATURE 
A(S)A 
INCLUDING 


A(S)A 
PR · ESCRIBED 
A(S)A 
INCLUSIVE 


A(S)A 
QUART 
ERMASTER 
A(S)A 
INDEMNITY 
A(S)A 
REC 
EPTACLE 
A(S)A 
INFLATION 
A(S)A(l)A 
RE 
ENFORCEMENT 
A(S)A 
INSIGNIA 


A(S)A 
RE 
ENFORCE 
A(S)A 
INTEGRITY 
A(S)A 
RE 
ENLISTED 
A(S)A 
INTELLIGENCE 


A(S)A 
R 
EMAINDER 
A(S)A 
INTELLIGENT 
A(S)A 
R 
EQUESTED 
A(S)A 
INTENSIVE 


A(S)A 
R 
ESOURCES 
A(S)A 
INTENTION 
A(S)A 
s 
EABORNE 
A(5)A(2)A 
INTERDICTION 


A(S)A 
s 
EAPLANES 
A(S)A 
INTERDICT 


A(S)A 
s 
ENTENCE 
A(S)A 
INTERVIEW 
A(S)A 
s 
EPARATE 
A(S)A 
INVENTION 
A(S)A 
s 
EPTEMBER 
A(5)A(3)A. 
INVESTIGATION 


A(S)A 
s 
EVENTEEN 
A(5)A(3)A 
INVESTIGATIONS 


A(S)A 
s 
EVENTEENTH 
A(S)A 
INVESTIGATE 


A(S)A 
SH 
ELLFIRE 
A(S)A 
L 
IMITATION 
A(S)A 
TEMP 
ERATURE 
A(S)A 
MOB 
ILIZATION 


A(S)A 
T 
ERRIBLE 
A(S)A 
PREL 
IMINARIES 


A(S)A 
TH 
ERE FORE 
A(S)A 
QUAL 
IFICATION 


A(S)A 
UN 
EXPENDED 
A(S)A 
RAD 
IOSTATION 


A(S)A 
UNID 
ENTIFIED 
A(S)A 
REG 
ISTRATION 


A(S)A 
UNIT 
EDSTATES 
A(S)A 
S . IGNALLING 
A(S)A 
WARD 
EPARTMENT 
A(S)A 
s 
IMILARITY 
A(S)A 
BE 
GINNING 
A(S)A 
SPEC 
IFICATION 


A(S)A 
GASSING 
A(S)A 
su 
IT ABILITY 
A(S)A 
GETTING 
A(S)A 
VER 
IFICATION 


A(S)A 
RE 
GARDING 
A(S)A 
v 
ISIBILITY 


A(S)A 
EIG 
HTEENTH 
A(S)A 
CHRONO 
LOGICAL 


A(S)A 
ADMIN 
ISTRATIVE 
A(S)A 
c 
LERICAL 


A(S)A 
ADMIN 
ISTRATION 
A(S)A 
INF 
LAMMABLE 
A(S)A 
ANT 
ICIPATION 
A(S)A 
LOGICAL 


A(S)A 
CLASS 
IFICATION 
A(S)A 
METEORO 
LOGICAL 


A(S)A 
CONS 
!DERATION 
A(S)A 
PO 
LITICAL 


A(S)A 
DEMOB 
ILIZATION 
A(S)A 
co 
MMENCEMENT 


A(S)A 
D 
ISCIPLINE 
A(S)A 
E 
MPLACEMENT 


A(S)A 
D 
ISCONTINUE 
A(S)A 
I 
MPROVEMENT 


A(S)A 
D 
ISCONTINUANC E 
A(S)A 
MANAGEMENT 
A(S)A 
D 
ISCUSSION 
A(S)A 
MARITIME 
A(S)A 
D 
ISPERSION 
A(S)A 
MAXIMUM 


A(S)A 
IDE NT 
IFICATION 
A(S)A 
MINIMUM 


A(S)A 
IMPASSIBLE 
A(S)A 
REI 
MBURSEMENT 


A(S)A 
IMPOSSIBLE 
A(S)A 
COMME 
NDATION 
A(S)A 
INCENDIARY 
A(S)A 
COMPE 
NSATION 
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Table D-7 j.Q('ust of words containing like letters repeated at various intervals (U) -Continued 


A(S)A 
CONCE 
NTRATING 
A(S)A 
PRINCIPAL 
A(S)A 
co 
NCERNING 
A(S)A 
PRINCIPLE 
A(S)A 
co 
NDITION 
A(S)A 
AI 
RSUPPORT 
A(S)A 
co 
NNECTING 
A(S)A 
A 
RBITRARY 


A(S)A 
CON 
NECTION 
A(S)A 
A 
RTILLERY 


A(S)A 
co 
NTINGENT 
A(S)A 
BA 
ROMETER 
A(S)A 
CONTI 
NUATION 
A(S)A 
B 
REAKTHROUGH 
A(S)A 
co 
NTRABAND 
A(S)A 
FI 
RECONTROL 
A(S)A 
co 
NVENIENT 
A(S)A 
GENE 
RALALARM 


A(S)A 
DISCO 
NTINUANCE 
A(S)A 
GY 
ROMETER 
A(S)A 
E 
NEMYTANKS 
A(S)A 
HYD 
ROMETER 
A(S)A 
E 
NLISTING 
I A(S)A 
HYG 
ROMETER 
A(S)A 
ENTA 
NGLEMENT 
A(S)A 
INTE 
RPRETER 


A(S)A 
FOU 
NDATION 
A(S)A 
IR 
REGULAR 


A(S)A 
I 
NCUNING 
A(S)A 
IR 
REGULARITIES 


A(S)A 
I 
NCLUDING 
A(S)A 
IR 
REGULARITY 


A(S)A 
I 
NTERMENT 
A(S)A 
p 
REMATURE 


A(S)A(3)A 
I 
NTERVENTION 
A(S)A 
p 
RISONER 
A(S)A(l)A 
I 
NTERVENING 
A(S)A 
p 
RISONERS 
A(S)A 
I 
NTERVENE 
A(S)A 
p 
ROCEDURE 
A(S)A 
I 
NVASION 
A(S)A 
PSYCH 
ROMETER 
A(S)A 
MA 
NAGEMENT 
A(S)A 
QUARTE 
RMASTER 
A(S)A 
RECOMME 
NDATION 
A(S)A 
RADIOGRAM 
A(S)A 
RECON 
NAISSANCE 
A(S)A 
RECOVER 
A(S)A 
REPRESE 
NTATION 
A(S)A 
REENFORCE 
A(S)A 
SIG 
NIFICANCE 
A(S)A 
REENFORCEMENT 
A(S)A 
SIG 
NIFICANT 
A(S)A 
REGISTRATION 
A(S)A 
TRA 
NSATLANTIC 
A(S)A 
REGULAR 


A(S)A 
ASS 
OCIATION 
li A(S)A 
REIMBURSEMENT 


A(S)A 
c 
OALITION 
(1 A(S)A 
REINFORCE 
I' 
A(S)A 
c 
OLUSION 
I A(S)A 
REINFORCEMENT 
A(S)A 
c 
OLUSIONS 
I A(S)A 
ST 
RAGGLER 


A(S)A 
c 
ONDITION 
A(S)A 
su 
RRENDER 


A(S)A 
CONF 
ORMATION 
A(S)A 
su 
RRENDERED 


A(S)A 
c 
ONTINUOUS 
! A(5)AA 
T 
RANSFERRED 


A(S)A 
c 
ORRESPONDENCE 
!: A(S)AA 
T 
RANSFERRING 


A(S)A 
c 
ORRESPONDING 
' A( 5)A 
T 
RANSFER 
A(S)A 
F 
ORMATION 
! A( S)A 
T 
RANSPORT 
A(S)A 
INF 
ORMATION 
: A( S)A 
T 
RANSPORTATION 
A(S)A 
INTR 
ODUCTION 
.1 A(S)A 
T 
RANSPORTS 


A(S)A 
OPERATOR 
• A(S)A 
T 
RANSVERSE 


A(S)A 
PR 
OPORTION 
, A( 5)A 
ASSE 
SSMENTS 


A(S)A 
PR 
OTECTION 
: A( S)A 
A 
SSOONAS 


A(S)A 
RADI 
OSTATION 
:1 A( 5)A 
CIRCUM 
STANCES 


A(S)A 
REC 
OGNITION 
1! A(5)A 
CRO 
SSROADS 


A(S)A 
TRANSP 
ORTATION 
:~ A(S)A 
DI 
STRICTS 


A(S)A 
PHILIPPINES 
II A(5)A 
E 
STABLISH 
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A(S)A 
E 
STABUSHED 
A(S)A 
s 
UBSTITUTE 


A(S)A 
E 
ST ABUSHMENT 
A(S)A 
s 
UBSTITUTION 


A(S)A 
NEW 
SPAPERS 
A(6)A 
ANTICIPATE 


A(S)A 
PHO 
SPHORUS 
A(6)A 
ANTICIPATION 


A(S)A 
PO 
SITIONS 
A(6)A 
CL 
ASSIFICATION 


A(S)A 
RE 
SOURCES 
A(6)A 
DEP 
ARTMENTAL 
A(S)A 
SAILORS 
A(6)A 
TR 
ADITIONAL 


A(S)A 
SECTORS 
A(6)A 
TR 
ANSPORTATION 


A(S)A 
SERIOUSLY 
A(6)A 
A 
CCEPTANCE 


A(S)A 
SKIRMISH 
A(6)A 
A 
CCORDANCE 


A(S)A 
SUBMISSION 
A(6)A 
CERTIFICATE 


A(S)A 
SUCCESSIVE 
A(6)A 
CIR 
CUMSTANCES 


A(S)A 
SUCCESS 
A(6)A 
CLEARANCE 


A(S)A 
SUCCESSFUL 
A(6)A 
COMMUNICATE 


A(S)A 
SUCCESSFULLY 
A(6)A 
COMMUNICATION 


A(S)A 
SURPLUS 
A(6)A 
CONSTRUCTION 


A(S)A 
SURPRISE 
A(6)A 
RE 
CONSTRUCTION 


A(S)A 
SUSPENSE 
A(6)A 
A 
DDRESSED 


A(S)A 
SUSPENSION 
A(6)A 
DECLARED 


A(S)A 
UN 
SUCCESSFUL 
A(6)A 
DEFEATED 
A(S)A 
AN 
TICIPATE 
A(6)A 
DEFENDED 
A(S)A 
AN 
TICIPATION 
A(6)A 
DEFERRED 
A(S)A 
CER 
TIFICATE 
A(6)A 
DEMANDED 
A(S)A 
CON 
TIN GENT 
A(6)A 
DEPARTED 
A(S)A 
IDEN 
TIFICATION 
A(6)A 
DEPLOYED 


A(S)A 
INS 
TRUMENT 
A(6)A 
DEPORTED 
A(S)A 
INS 
TRUMENTS 
A(6)A 
DESERTED 


A(S)A 
IN 
TERCEPT 
A(6)A 
DETACHED 


A(S)A 
IN 
TERCEPTED 
A(6)A 
DICTATED 


A(S)A 
IN 
TERDICT 
A(6)A 
DISARMED 


A(S)A 
IN 
TERDICTION 
A(6)A 
UN 
DERSTAND 


A(S)A 
IN 
TERMENT 
A(6)A 
UN 
DERSTOOD 


A(S)A(l)A 
IN 
TERPRETA TION 
A(6)A 
A 
ERODROME 


A(S)A 
IN 
TERPRETER 
A(6)A 
A 
EROPLANE 


A(S)A 
IN 
TERRUPT 
A(6)A 
B 
EENNEEDED 
A(S)A 
IN 
TERRUPTED 
A(6)A 
B 
ELLIGERENT 
A(S)A 
IN 
TERRUPTION 
A(6)A 
D 
ECIPHERED 


A(S)A 
IN 
TERVENTION 
A(6)A 
D 
EFECTIVE 


A(S)A 
IN 
TRODUCTION 
A(6)A 
D 
EFENSIVE 


A(S)A 
IN 
TRODUCTORY 
A(6)A 
D 
EPARTURE 


A(S)A 
QUAR 
TERMASTER 
A(6)A 
D 
ESIGNATE 


A(S)A 
SA 
TISFACTORY 
A(6)A 
D 
ESIGNATED 


A(S)A 
SUI 
TABIUTY 
A(6)A 
D 
ESPATCHES 


A(S)A 
TONIGHT 
A(6)A 
D 
ESPATCHED 


A(S)A 
TRAJECTORY 
A(6)A 
D 
ESTITUTE 


A(S)A(3)A 
TRANSATLANTIC 
A(6)A 
DET 
ERIORATE 


A(S)A 
UNI 
TEDSTATES 
A(6)A 
D 
ETERMINE 
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A(6)A 
D 
ETERMINED 
A(6)A 
R 
EENFORCE 


A(6)A 
D 
EVELOPMENT 
A(6)A(l)A 
R 
£ENFORCEMENT 


A(6)A 
ECHELONED 
A(6)A 
R 
EENLISTED 


A(6)A 
ELIGIBLE 
A(6)A 
RE 
ENLISTMENT 


A(6)A 
EMBASSIES 
A(.S)A 
R 
EFERENCE 


A(6)A 
EMPLOYEE 
A(6)A(l)A 
R 
EIMBURSEMENT 


A(6)A 
EMPLOYMENT 
A(6)A(l)A 
R 
EINFORCEMENT 


A(6)A 
ENCIRCLE 
A(6)A 
R 
EINFORCE 


A(6)A(l)A 
ENCOUNTERED 
A(6)A(l)A 
R 
EINST ATEMENT 
A(6)A 
EN 
EMYPLANES 
A(6)A 
R 
EINSTATE 


A(6)A 
ENFILADE 
A(6)A 
R 
EPLACEMENT 


A(6)A 
ENGAGEMENT 
A(6)A 
REP RES 
ENTATIVE 
A(6)A 
ENLISTMENT 
A(6)A 
R 
EQUIREMENT 
A(6)A 
ENROLLMENT 
A(6)A 
R 
ESTRICTED 


A(6)A(l)A 
ENTANGLEMENT 
A(6)A 
SEV 
ENTYFIVE 
A(6)A 
ENT 
ERTAINMENT 
A(6)A 
T 
ECHNIQUE 


A(6)A 
ENTRAINED 
A(6)A 
T 
ELEPHONE 


A(6)A 
ENVELOPE 
A(6)A 
T 
ENTATIVE 
A(6)A 
EQUALIZE 
A(6)A 
TH 
ERMOMETER 
A(6)A 
EQUIPAGE 
A(6)A 
TW 
ENTYFIVE 


A(6)A 
EQUIVALENT 
A(6)A 
DISTIN 
GUISHING 


A(6)A 
ESTIMATE 
A(6)A 
GROUPING 
A(6)A 
ESTIMATEDAT 
A(6)A 
GUARDING 


A(6)A 
ESTIMATES 
A(6)A 
SI 
GNALLING 
A(6)A 
EVACUATE 
A(6)A 
c 
IRCULATION 


A(6)A 
EXCAVATE 
A(6)A. 
D 
IPLOMATIC 


A(6)A 
EXCHANGE 
A(6)A 
D 
ISORGANIZED 


A(6)A 
EXCITEMENT 
A(6)A 
D 
ISPOSITION 


A(6)A 
EXERCISE 
A(6)A 
D 
ISTINCTION 


A(6)A 
EXERCISES 
A(6)A 
D 
ISTINGUISH 


A(6)A 
EXHIBITED 
A(6)A 
D 
ISTINGUISHED 
A(6)A 
EXPEDITE 
A(6)A(2)A 
D 
ISTINGUISHING 


A(6)A 
EXPERIMENT 
A(6)A 
DIST 
INGUISHING 


A(6)A 
EXT 
ERMIN ATE 
A(6)A 
F 
INGERPRINT 
A(6)A 
INDET 
ERMINATE 
A(6)A(3)A 
IDENTIFICATION 


A(6)A 
INV 
ESTIGATE 
A(6)A 
IMPRACTICABLE 


A(6)A 
M 
EASUREMENT 
A(6)A 
IMPRESSION 


A(6)A 
M 
EASUREMENTS 
A(6)A 
IMPRESSIVE 


A(6)A 
M 
ECHANIZED 
A(6)A 
INDICATING 


A(6)A 
NEC 
.f:SSITATE 
A(6)A 
INDICATION 


A(6)A 
OV 
ERWHELMED 
A(6)A 
INEFFICIENCY 


A(6)A 
p 
ENETRATE 
A(6)A 
INFLICTING 


A(6)A 
PR 
EARRANGED 
A(6)A 
INSECURITY 


A(6)A 
PR 
ECEDENCE 
A(6)A 
INSPECTION 


A(6)A 
PR 
EFERENCE 
A(6)A 
INVITATION 
A(6)A 
PR 
EPAREDNESS 
A(6)A 
IRRIGATION 
A(6)A 
R 
ECOGNIZE 
A(6)A 
UN 
IDENTIFIED 
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A(6)A 
w ITHDRAWING 
A(6)A 
c 
ONCESSION 


A(6)A 
MEASUREMENT 
A(6)A 
c 
ONCLUSION 


A(6)A 
MEASUREMENTS 
A(6)A 
c 
ONFESSION 


A(6)A 
ME 
MORANDUM 
A(6)A 
c 
ONNECTION 


A(6)A 
A 
NTEDATING 
A(6)A 
co 
OPERATION 


A(6)A 
COMMU 
NICATION 
A(6)A 
c 
ORRECTION 


A(6)A 
co 
NCEALMENT 
A(6)A 
D 
OMINATION 


A(6)A 
CONCE 
NTRATION 
A(6)A 
F 
OUNDATION 


A(6)A 
co 
NCESSION 
A(6)A 
OBJECTION 


A(6)A 
co 
NCLUSION 
A(6)A 
OPERATION 


A(6)A 
co 
NFESSION 
A(6)A 
p 
OPULATION 


A(6)A 
co 
NFINEMENT 
A(6)A 
p 
OSSESSION 


A(6)A 
co 
NNECTION 
A(6)A 
PARAGRAPH 


A(6)A 
DISTI 
NGUISHING 
A(6)A 
AG 
RICULTURAL 


A(6)A 
E 
NCIRCLING 
A(6)A 
B 
RIG ADlER 
A(6)A 
E 
NEMYPLANES 
A(6)A 
INT 
RODUCTORY 


A(6)A 
E 
NLISTMENT 
A(6)A 
I 
RREGULAR 


A(6)A 
E 
NROLLMENT 
A(6)A 
I 
RREGULARITIES 


A(6)A(2)A 
E 
NTERTAINMENT 
A(6)A 
I 
RREGULARITY 
A(6)A 
E 
NTRUCKING 
A(6)A 
p 
ROJECTOR 


A(6)A 
FI 
NGERPRINT 
A(6)A 
p 
ROTECTOR 


A(6)A 
I 
NDICATING 
A(6)A 
REAR GUARD 


A(6)A 
I 
NFLATION 
A(6)A 
RECEIVER 


A(6)A 
I 
NFLICTING 
A(6)A 
RECONSTRUCTION 


A(6)A. 
i 
NSTANT ANEOUS 
A(6)A 
RECORDER 


A(6)A 
I 
NSTRUMENT 
A(6)A 
REGISTER 


A(6)A 
I 
NSTRUMENTS 
A(6)A 
REJECTOR 


A(6)A 
I 
NTENTION 
A(6)A 
REMEMBER 
A(6)A 
I 
NTERNMENT 
A(6)A 
REPEATER 


A(6)A 
I 
NVENTION 
A(6)A 
REVOLVER 


A(6)A 
NEGLIGENT 
A(6)A 
THE 
RMOMETER 
A(6)A 
NEGLIGENCE 
A(6)A 
T 
RAJECTORY 


A(6)A 
NINETEEN 
A(6)A 
T 
RANSFERRED 


A(6)A 
NINETEENTH 
A(6)A 
T 
RANSFERRING 
A(6)A 
NORTHERN 
A(6)A 
AS 
SEMBUES 


A(6)A 
NUMBERING 
A(6)A 
CA 
SUALTIES 


A(6)A 
ORGA 
NIZATION 
A(6)A 
cu 
STOMHOUSE 


A(6)A 
RECO 
NNAISSANCE 
A(6)A 
DE 
SPATCHES 


A(6)A 
RECON 
NOITERING 
A(6)A 
DE 
STROYERS 


A(6)A 
REE 
NLISTMENT 
A(6)A 
DI 
SPATCHES 


A(6)A 
REORGA 
NIZATION 
A(6)A 
DI 
STINGUISH 


A(6)A 
SA 
NITATION 
A(6)A 
DI 
STING VI SHED 


A(6)A 
TRA 
NSFERRING 
A(6)A 
DI 
STINGUISHING 


A(6)A 
u NDERSTAND 
A(6)A 
E 
STIMATES 


A(6)A 
c 
OLLECTION 
A(6)A 
SOLDIERS 


A(6)A 
c 
OMMISSION 
A(6)A 
SOUTHEAST 


A(6)A 
c 
OMMISSIONER 
A(6)A 
SOUTHWEST 
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A(6)A 
SOUTHWESTERN 
A(7)A 
DECREASED 


A(6)A 
STATIONS 
A(7)A 
DESCRIBED 


A(6)A 
SUPPLIES 
A(7)A 
DEST~OYED 


A(6)A 
su 
SPICIONS 
A(7)A 
DETONATED 
A(6)A 
su 
SPICIOUS 
A(7)A 
DETRAINED 
A(6)A 
AT 
TACHMENT 
A(7)A 
DEVELOPED 


A(6)A. 
AT 
TAINMENT 
A(7)A 
DISCUSSED 


A(6)A 
CEN 
TRALIZATION 
A(7)A 
DISPERSED 


A(6)A 
DE 
TACHMENT 
A(7)A 
DOMINATED 
A(6)A 
DE 
TERIORATE 
A(7)A 
UNI 
DENTIFIED 
A(6)A 
DE 
TERMINATION 
A(7)A 
c 
ENTRALIZE 
A(6)A 
ENTER 
TAINMENT 
A(7)A 
DEC 
ENTRALIZE 
A(6)A 
EX 
TERMINATE 
A(7)A 
DEC 
ENTRALIZED 
A(6)A 
EX 
TERMINATION 
A(7)A 
D 
ENCIPHERMENT 


A(6)A 
INDE 
TERMINATE 
A(7)A 
D 
EMOBILIZE 
A(6)A 
IN 
TERNMENT 
A(7)A 
D 
EPENDABLE 


A(6)A 
NA 
TIONALITY 
A(7)A 
ECHELONMENT 


A(6)A 
REINS 
TATEMENT 
A(7)A 
EFFECTIVE 


A(6)A 
s 
TATEMENT 
A(7)A 
ELABORATE 
A(6)A 
TEMPERATURE 
A(7)A 
EMPLACEMENT 


A(6)A 
1WENTIETH 
A(7)A 
ENCIPHERED 


A(6)A 
c 
USTOMHOUSE 
A(7)A 
ENDURANCE 


A(6)A 
SIM 
ULTANEOUS 
A(7)A 
ENFORCEMENT 


A(6)A 
s 
UCCESSFUL 
A(7)A 
ENTRENCHED 


A(6)A 
s . UCCESSFULL Y 
A(7)A 
EXCESSNE 


A(6)A 
s 
USPICIOUS 
A(7)A 
EXCLUSIVE 


A(6)A 
UNS 
UCCESSFUL 
A(7)A 
EXECUTIVE 


A(6)A 
SE 
VENTYFIVE 
A(7)A 
EXPANSIVE 


A(6)A 
WITHDRAW 
A(7)A 
EXPENSIVE 


A(6)A 
WITHDRAWAL 
A(7)A 
EXPLOSIVE 


A(6)A 
WITHDRAWING 
A(7)A 
EXTENSIVE 


A(6)A 
WITHDREW 
A(7)A 
H 
EADQUARTERS 


A(7)A 
ACCIDENTAL 
A(7)A 
H 
EAVYBOMBER 
A(7)A 
ACCOMMODATION 
A(7)A 
H 
EAVYLOSSES 


A(7)A 
ADDITIONAL 
A(7)A 
INT 
ELLIGENCE 


A(7)A 
APPROPRIATE 
A(7)A 
INT 
ERMEDIATE 
A(7)A 
APPROXIMATE 
A(7)A 
N 
EGLIGENCE 


A(7)A 
ARMOREDCAR 
A(7)A 
R 
EAPPOINTED 
A(7)A 
ARTIFICIAL 
A(7)A 
R 
ECEPTACLE 


A(7)A 
N 
ATURALIZATION 
A(7)A 
R 
ECOMMENDED 


A(7)A 
CHARA 
CTERISTIC 
A(7)A 
R 
ECONNOITER 


A(7)A 
CLASSIFICATION 
A(7)A 
R 
ECONNOITERING 


A(7)A 
CONFERENCE 
A(7)A 
RE 
ENFORCEMENT 


A(7)A 
CONFIDENCE 
A(7)A 
R 
EENLISTMENT 
A(7)A 
CONSPIRACY 
A(7)A 
R 
ESISTANCE 


A(7)A 
CONY ALESCENT 
A(7)A 
EN 
GINEERING 
A(7)A 
IN 
COMPETENCE 
A(7)A 
p 
HOTOGRAPHY 
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A(7)A 
T 
HIRTEENTH 
A(7)A 
REI 
NSTATEMENT 
A(7)A 
ADM 
INISTRATIVE 
A(7)A 
TRA 
NSMISSION 


A(7)A 
ADM 
INISTRATION 
A(7)A 
ACC 
OMMODATION 


A(7)A 
D · IFFICULTIES 
A(7)A 
c OMPETITION 


A(7)A 
D 
ISTRIBUTING 
A(7)A 
c OMPOSITION 


A(7)A 
D 
ISTRIBUTION 
A(7)A 
c OMPUTATION 


A(7)A 
IMMIGRATION 
A(7)A 
c ONGRESSIONAL 


A(7)A 
INDETERMINATE 
A(7)A 
c ONSUMPTION 


A(7)A 
INFORMATION 
A(7)A 
c OOPERATION 


A(7)A 
INSPIRATION 
A(7)A 
co 
ORDINATION 


A(7)A 
INSTITUTION 
A(7)A 
c ORPORATION 


A(7)A 
INSTRUCTION 
A(7)A 
DEM 
ONSTRATION 


A(7)A 
INSTRUCTIONS 
A(7)A 
OCCUPATION 


A(7)A 
INTERESTING 
A(7)A 
OPPOSITION 


A(7)A 
INTERFERING 
A(7)A 
PR 
OCLAMATION 


A(7)A 
INTERMEDIATE 
A(7)A 
PHOTOGRAPHY 


A(7)A 
INTERNATIONAL 
A(7)A 
A 
RMOREDCAR 


A(7)A 
INTERVENING 
A(7)A 
EXT 
RAORDINARY 


A(7)A 
MECHANISM 
A(7)A 
NO 
RTHWESTERN 
A(7)A 
MEDIUMBOMBER 
A(7)A 
p 
REUMINARIES 


A(7)A 
AN 
NOUN CEMENT 
A(7)A 
p 
REUMINARY 


A(7)A 
co 
NGRESSIONAL 
A(7)A 
REMAINDER 
A(7)A 
co 
NSTITUTING 
A(7)A 
SHA 
RPSHOOTER 


A(7)A 
co 
NSUMPTION 
A(7)A 
A 
SSEMBLIES 


A(7)A 
co 
NVALESCENT 
A(7)A 
AS 
SESSMENTS 


A(7)A 
DEMO 
NSTRATION 
A(7)A 
AS 
SIGNMENTS 


A(7)A 
E 
NFORCEMENT 
A(7)A 
HO 
STILITIES 


A(7)A 
E 
NGINEERING 
A(7)A 
IN 
STRUMENTS 


A(7)A 
I 
NCOMPETENT 
A(7)A 
MEA 
SUREMENTS 


A(7)A 
I 
NCOMPETENCE 
A(7)A 
SEAPLANES 


A(7)A 
I 
NDEPENDENT 
A(7)A 
STANDARDS 


A(7)A 
I 
NDETERMINATE 
A(7)A 
A 
ITACHMENT 


A(7)A 
I 
NDICATION 
A(7)A 
A 
TTAINMENT 
A(7)A 
I 
NEFFICIENCY 
A(7)A 
ES 
TIMATEDAT 
A(7)A 
I 
NSPECTION 
A(7)A 
IN 
TELLIGENT 
A(7)A 
I 
NTELLIGENCE 
A(7)A 
IN 
TERMEDIATE 
A(7)A 
I 
NTELLIGENT 
A(7)A 
IN 
TERPRETATION 
A(7)A 
I 
NTERESTING 
A(7)A 
NA 
TURALIZA TION 


A(7)A 
I 
NTERFERENCE 
A(7)A 
THERMOMETER 
A(7)A 
I 
NTERFERING 
A(7)A 
THIRTEENTH 
A(7)A 
I 
NTERVENING 
A(7)A(l)A 
TRANSPORTATION 


A(7)A 
I 
NVITATION 
A(7)A 
TRANSPORT 


A(7)A 
NO 
NCOMBATANT 
A(7)A 
TRANSPORTS 


A(7)A 
PE 
NETRATION 
A(7)A 
YESTERDAY 


A(7)A 
RECO 
NNOITERING 
A(8)A 
ADMINISTRATIVE 
A(7)A 
REE 
NFORCEMENT 
A(8)A 
ADMINISTRATION 


A(7)A 
REI 
NFORCEMENT 
A(8)A 
ANTIAIRCRAFT 
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A(8)A 
COINCIDENCE 
A(8)A 
MEMORANDUM 
A(8)A 
DIS 
CONTINUANCE 
A(8)A 
ADMI 
NISTRATION 


A(8)A 
DECIPHERED 
A(8)A 
A 
NNOUNCEMENT 


A(8)A 
DESIGNATED 
A(8)A 
CA 
NCELLATION 


A(8)A 
DESPATCHED 
A(8)A 
co 
NCENTRA TING 
A(8)A 
DETERMINED 
A(8)A 
co 
NCILLIATION 


A(8)A 
DISPATCHED 
A(8)A 
co 
NFIRMATION 
A(8)A 
DISTRESSED 
A(8)A 
co 
NFISCATION 


A(8)A 
c 
ERTIFICATE 
A(8)A 
co 
NFORMATION 


A(8)A 
CORR 
ESPONDENCE 
A(8)A 
co 
NSCRIPTION 


A(8)A 
D 
EMONSTRATE 
A(8)A 
co 
NSTITUTION 


A(8)A 
D 
EMONSTRA TED 
A(8)A 
co 
NSTRUCTION 


A(8)A 
D 
ESCRIPTIVE 
A(8)A 
co 
NTINUATION 


A(8)A 
D 
ETERIO~RATE 
A(8)A 
co 
NVERSATION 


A(8)A 
ENCIPHERMENT 
A(8)A 
E 
NCIPHERMENT 


A(8)A 
ENCOUNTERED 
·A(8)A 
E 
NTANGLEMENT 
A(8)A 
ENEMYPLANES 
A(8)A 
E 
NTERPRISING 
A(8)A 
ENTANGLEMENT 
A(8)A 
I 
NFORMATION 


A(8)A 
ENTERPRISE 
A(8)A 
I 
NSPIRATION 


A(8)A 
ESTABLISHED 
A(8)A 
I 
NSTITUTION 


A(8)A 
IND 
ETERMINATE 
A(8)A 
I 
NSTRUCTION 


A(8)A 
IRR 
EGULARITIES 
A(8)A 
I 
NSTRUCTIONS 


A(8)A 
M 
EDIUMBOMBER 
A(8)A 
I 
NTERNATIONAL 
A(8)A 
N 
ECESSITATE 
A(8)A 
NAVIGATION 
A(8)A 
p 
ERFORMANCE 
A(8)A 
RECO 
NSTRUCTION 


A(8)A 
PR 
ELIMINARIES 
A(8)A 
c 
OMMENDATION 


A(8)A 
R 
EAPPOINTMENT 
A(8)A 
c 
OMPENSA TION 


A(8)A 
R 
EENFORCEMENT 
A(8)A 
c 
ONCILIATION 


A(8)A 
R 
EIMBURSEMENT 
A(8)A 
c 
ONFIRMA TION 


A(8)A 
R 
EINFORCEMENT 
A(8)A 
c 
ONFISCATION 


A(8)A 
R 
EINST A TEMENT 
A(8)A 
c 
ONFORMA TION 


A(8)A 
REPR 
ESENTATIVE 
A(8)A 
c 
ONSCRIPTION 


A(8)A 
R 
ESPONSIBLE 
A(8)A 
c 
ONSTITUTION 


A(8)A 
R 
ETROACTIVE 
A(8)A 
c 
ONSTRUCTION 


A(8)A 
s 
EVENTYFIVE 
A(8)A 
c ONTINUATION 


A(8)A 
T 
EMPERATURE 
A(8)A 
c 
ONVERSATION 


A(8)A 
HYDROGRAPHIC 
A(8)A 
DEM 
OBILIZATION 


A(8)A 
D 
ISCREPANCIES 
A(8)A 
M 
OBILIZATION 


A(8)A 
ILLUSTRATION 
A(8)A 
OBSERVATION 


A(8)A 
INAUGURATION 
A(8)A 
OBSTRUCTIONS 


A(8)A 
INSTALLATIONS 
A(8)A 
REC 
OMMENDA TION 


A(8)A 
INTERDICTION 
A(8)A 
REC 
ONSTRUCTION 


A(8)A 
INTERRUPTION 
A(8)A 
R 
OADJUNCTION 


A(8)A 
INTERVENTION 
A(8)A 
QUA 
RTERMASTER 
A(8)A 
INTRODUCTION 
A(8)A 
A 
SSESSMENTS 


A(8)A(I)A 
IRREGULARITIES 
A(8)A 
A 
SSIGNMENTS 


A(8)A 
IRREGULARITY 
A(8)A 
IN 
STRUCTIONS 


D-90 
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Table D-7 (¢). List of wor~ contaifiing like letters repeated at various intervals (U) -Continued 


A(8)A 
INVE 
STIGATIONS 
A(9)A 
c 
OMMUNICATION 


A(8)A 
OB 
STRUCTIONS 
A(9)A 
c 
ONCENTRATION 


A(8)A 
REPRE 
SENTATIONS 
A(9)A 
c 
ONSIDERATION 


A(8)A 
SCHOOLHOUSE 
A(9)A 
ORGANIZATION 


A(8)A 
SUBMARINES 
A(9)A 
RE 
ORGANIZATION 


A(8)A 
SUSPICIONS 
A(9)A 
RANGEFINDER 
A(8)A 
SUSPICIOUS 
A(9)A 
RECONNOITER 


A(8)A 
AN 
TIAIRCRAFT 
A{9)A 
RECONNOITERING 


A{8)A 
EN 
TANGLEMENT 
A(9)A 
DI 
SCREPANCIES 


A{9)A 
AGRICULTURAL 
A(9)A 
IN 
STALLATIONS 


A(9)A 
CHRONOLOGICAL 
A{9)A 
IN 
STANTANEOUS 


A(9)A 
CIRCUMSTANCES 
A{9)A 
MI 
SCELLANEOUS 


A(9)A 
RE 
CONNAISSANCE 
A(9)A 
EN 
TERT AINMENT 
A(9)A 
DISAPPEARED 
A(9)A 
ES 
T ABLISHMENT 
A(9)A 
DISINFECTED 
A(9)A 
TRANSATLANTIC 


A(9)A 
D 
ECENTRALIZE 
A(9)A 
TRANSPORTATION 


A(9)A 
D 
ECENTRALIZED 
A(9)A 
UNSUCCESSFUL 


A(9)A 
ENTERTAINMENT 
A(IO).A 
COUNTERATTACK 


A(9)A 
ESTABLISHMENT 
A(lO)A 
DEMONSTRATED 


A(9)A 
EXTERMINATE 
A(IO)A 
DISORGANIZED 


A(9)A 
c 
IRCUMST ANTIAL 
A(IO)A 
DISSEMINATED 


A(9)A 
INVESTIGATION 
A(IO)A 
INTERPRETATION 
A(9)A 
INVESTIGATIONS 
A(IO)A 
IRREGULARITIES 


A(9)A 
A 
NTICIPATION 
A(IO)A 
CE 
NTRAUZATION 


A(9)A 
co 
NCENTRA TION 
A(IO)A 
I 
NVESTIGATION 


A{9)A 
.CO 
NSIDERATION 
A(IO)A 
I 
NVESTIGATIONS 


A(9)A 
E 
NTERTAINMENT 
A(IO)A 
NORTHWESTERN 


A(9)A 
IDE 
NTIFICATION 
A(IO)A 
REVOLUTIONARY 


A(9)A 
I 
NAUGURATION 
A(IO)A 
SEARCHLIGHTS 


A(9)A 
I 
NSTALLATIONS 
A(IO)A 
SIMULT AN EO US 


A(9)A 
I 
NTERDICTION 
A{ll)A 
CORRESPONDENCE 


A(9)A 
I 
NTERRUPTION 
A(ll)A 
DECENTRALIZED 


A(9)A 
I 
NTERVENTION 
A(Il)A 
DISTINGUISHED 


A(9)A 
I 
NTRODUCTION 
A(ll)A 
R 
ECONNAISSANCE 


A{9)A 
NONCOMBATANT 
A(ll)A 
I 
NTERPRET ATION 


A(9)A 
TRA 
NSPORTATION 
A(I2)A 
NATURALIZATION 
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I 
UJ 


~ 
Vl 
w 
w 
_J 
co 


X 
<( 
1- 
Q 
_J 
z :J 
w 
u. 
a.. 
w 
a.. 
Vl 
<( 
:J 
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Table E-1 o/)· Expected number of repetitions, polyalphabetic ciphers (U) 


Number 
Expected number of diagraphs occurring exactly x times 
of 
letters 
E(2) 
E(3) 
E(4) 
E(5) 
E(6) 
E(7) 
E(8) 
E(9) 
E(IO) I 


I 


100 
6.21 
0.298 
0.011 
200 
21.8 
2.12 
0.154 
0.009 
300 
42.5 
6.23 
0.683 
0.060 
0.004 
400 
65.3 
12.8 
1.87 
0.220 
0.022 
0.002 
500 
88.1 
21.6 
3.97 
0.582 
0.071 
0.008 
600 
110 
32.3 
7.11 
1.25 
0.184 
0.023 
0.003 
700 
129 
44.3 
11.4 
2.35 
0.403 
0.059 
0.008 
0.001 
800 
145 
57.1 
16.8 
3.96 
0.777 
0.130 
0.019 
0.003 
900 
158 
70.1 
23.2 
6.16 
1.36 
0.257 
0.043 
0.006 
0.001 
1000 
169 
83.0 
30.6 
9.03 
2.21 
0.466 
0.085 
0.014 
0.002 


--·--~ 


Number 
Expected number of trigraphs 
of 
Number 
Tetragraphs . j 


of 
Number 
Penta- 
of 
graphs 
letters 
E(2) 
E(3) 
E(4) 
letters 
E(2) 
E(3) 
letters 
E(2) 


I 


100 
0.269 
0.001 
100 
0.010 
100 
200 
1.10 
0.004 
200 
0.043 
200 
0.002 
300 
2.48 
0.014 
300 
0.096 
300 
0.004 
400 
4.40 
0.033 
400 
0.171 
400 
0.007 
500 
6.85 
0.064 
500 
0.270 
500 
0.011 
600 
9.81 
0.111 
0.001 
600 
0.389 
600 
0.015 
700 
13.3 
0.175 
0.002 
800 
\7.3 
0.261 
0.003 
700 
0.530 
! 
800 
0.693 
700 
0.021 
800 
0.027 
900 
21.8 
0.371 
0.005 
900 
0.877 
900 
0.034 
1000 
26.8 
0.505 
0.008 
1000 
1.08 
0.001 
1000 
0.042 


E-2 
~cONFIO£NTIAL 


.. CONFII'1PNTI41 


Table E-2 (f)' Expected values of(/Jr and C/Jp (U). 


N 
(/Jr 
C/Jp 
N 
(/Jr 
f/Jp 
N 
(/Jr 
(/Jp 
N 
(/Jr 
(/Jp 
N 
C/Jr 
(/Jp 


11 
4:23 
7.34 
29 
31 
54 
47 
83 
144 
65 
160 
277 
83 
262 
454 
12 
5.08 
8.80 
30 
33 . 
58 
48 
87 
150 
66 
165 
286 
84 
268 
465 
13 
6.00 
10.4 
31 
36 
62 
49 
90 
157 
67 
170 
295 
85 
27': 
476 
14 
7.00 
12.1 
32 
38 
66 
50 
94 
163 
68 
175 
304 
86 
281 
488 
15 
8.08 
14.0 
33 .41 
70 
51 
98 
170 
69 
180 
313 
87 
288 
499 
16 
9.23 
16.0 
34 
43 
75 
52 
102 
177 
70 
186 
322 
88 
294 
511 
17 
10.5 
18.1 
35 
46 
79 
53 
106 
184 
71 
191 
331 
89 
301 
522 
18 
11.8 
20.4 
36 
48 
84 
54 
110 
191 
72 
197 
341 
90 
308 
534 
19 
13.2 
22.8 
37 
51 
89 
55 
114 
198 
73 
202 
351 
91 
315 
546 
20 
14.6 
25.3 
38 
54 
94 
56 
118 
205 
74 
208 
360 
92 
322 
558 
21 
16.2 
28.5 
39 
57 
99 
57 
123 
213 
75 
213 
370 
93 
329 
571 
22 
17.8 
30.8 
40 
60 
104 
58 
127 
221 
76 
219 
380 
94 
336 
583 
23 
19.5 
33.8 
41 
63 
109 
59 
132 
228 
77 
225 
390 
95 
343 
596 
24 
21.2 
36.8 
42 
66 
115 
60 
136 
236 
78 
231 
401 
96 
351 
608 
25 
23.1 
40.0 
43 
69 
120 
61 
141 
244 
79 
237 
411 
97 
358 
621 
26 
25.0 
43.4 
44 
73 
126 
62 
145 
252 
80 
243 
422 
98 
366 
634 
27 
27.0 
46.8 
45 
76 
132 
63 
150 
261 
81 
249 
432 
99 
373 
647 
28 
29.1 
50.4 
46 
80 
138 
64 
155 
269 
82 
255 
443 
100 
381 
660 - 
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E-4 


1 
Prime 
2 
Prime 
3 
Prime 
4 
2 
5 
Prime 
6 
2 3 
7 
Prime 
8 
2 4 
9 
3 


10 
2 5 
11 
Prime 
12 
2 3 4 6 
13 
Prime 
14 
2 7 
15 
3 5 
16 
2 4 8 
17 
Prime 
18 
2 3 6 9 
19 
Prime 


20 
2 4 5 10 


21 
3 7 
22 
2 11 
23 
Prime 
24 
2 3 4 6 8 12 
25 
5 
26 
2 13 
27 
3 9 
28 
2 4 7 14 
29 
Prime 


30 
2 3 5 6 10 15 
31 
Prime 
32 
2 4 8 16 
33 
3 11 
34 
2 17 
35 
5 7 
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Table E-3 ( u ).Factor table (U) 


NUMBERS 1-400 


36 
2 3 4 6 9 12 18 
37 
Prime 
38 
2 19 
39 
3 13 


40 
2 4 5 8 10 20 


41 
Prime 
42 
2 3 6 7 14 21 
43 
Prime 
44 
2 4 11 22 
45 
3 5 9 15 
46 
2 23 
47 
Prime 
48 
2 3 4 6 8 12 16 24 
49 
7 


50 
2 5 10 25 
51 
3 17 
52 
2 4 13 26 
53 
Prime 
54 
2 3 6 9 18 27 
55 
5 11 
56 
2 4 7 8 14 28 
57 
3 19 
58 . 2 29 
59 
Prime 


60 
2 3 4 5 6 10 12 15 


20 30 


61 
Prime 
62 
2 31 
63 
3 7 9 21 
64 
2 4 8 16 32 
65 
5 13 
66 
2 3 6 11 33 
67 
Prime 
68 
241734 
69 
3 23 


70 2 5 7 1 0 14 35 
71 Prime 
72 2 3 4 6 8 9 12 18 24 36 
73 Prime 
74 2 37 
75 3 5 15 25 
76 2 4 19 38 
77 7 11 
78 2 3 6 13 26 39 
79 Prime 


80 2 4 5 8 10 16 20 40 


81 
3 9 27 
82 2 41 
83 Prime 
84 2 3 4 6 7 12 14 21 28 42 
85 5 17 
86 2 43 
87 3 29 
88 2 4 8 11 22 44 
89 Prime 


90 2 3 5 6 9 10 15 18 30 45 
91 
7 13 
92 2 4 23 46 
93 3 31 
94 2 47 
95 5 19 
96 2 3 4 6 8 12 16 24 3 2 48 
97 Prime 
98 
2 7 14 49 
99 3 9 11 33 


100 2 4 5 10 20 25 50 
101 Prime 


102 2 3 6 17 34 51 


103 Prime 


104 2 4 8 13 26 52 
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Table E-3_(U). Factor Table (D)--Continued 


NUMBERS 1-400 -- Continued 


105 3 5 7 15 21 35 


106 2 53 


107 Prime 
108 2 3 4 6 9 12 18 27 
36 54 


109 Prime 
110 2 5 10 11 22 55 
111 
3 37 
112 2 4 7 8 14 16 28 56 
113 Prime 


114 2 3 6 19 38 57 
115 5 23 
116 2 4 29 58 
117 3 9 13 39 
118 2 59 
119 7 17 


120 2 3 4 5 6 8 10 12 
15 20 24 30 40 60 


121 
11 
122 2 61 
123 3 41 
124 2 4 31 62 
125 5 25 
126 2 3 6 7 9 14 18 21 
42 -63 


127 Prime 


128 2 4 8 16 32 64 
129 3 43 


130 2 5 10 13 26 65 
131 
Prime 


13 2 2 3 4 6 11 12 22 33 
44 66 
133 7 19 
134 2 67 
135 3 5 9 15 27 45 
136 2 4 8 1 7 34 68 
137 Prime 


138 2 3 6 23 46 69 
139 Prime 
140 2 4 5 7 10 14 20 28 
35 70 


141 
3 47 


142 2 71 
143 
11 13 
144 2 3 4 6 8 9 12 16 
18 24 36 48 72 
145 5 29 
146 2 73 
147 3 7 21 49 
148 2 4 37 74 
149 Prime 


150 2 3 5 6 10 15 25 30 
50 75 
151 
Prime 


152 2 4 8 19 38 76 
153 3 9 17 51 
154 2 7 11 14 22 77 
155 
5 31 
156 2 3 4 6 12 13 26 39 
52 78 
157 Prime 


158 2 79 
159 3 53 


160 2 4 5 8 10 16 20 32 


40 80 


161 
7 23 
162 2 3 6 9 18 27 54 81 
163 Prime 
164 2 4 41 82 
165 3 5 11 15 33 55 
166 2 83 
167 Prime 
168 2 3 4 6 7 8 12 14 
21 24 28 42 56 84 
169 
13 


170 2 5 10 17 34 85 
171 
3 9 19 57 
172 2 4 43 86 
173 Prime 


174 2 3 6 29 58 87 
175 5 7 25 35 
17 6 2 4 8 11 16 22 
44 88 


1771 3 59 


178 2 89 
179 Prime 
180 2 3 4 5 6 9 10 12 15 
18 20 30 36 45 60 90 


181 
Prime 


182 2 7 13 14 26 91 
183 3 61 
184 2 4 8 23 46 92 
185 5 37 
186 2 3 6 31 62 93 
187 
11 17 
188 2 4 47 94 
189 3 7 9 21 27 63 


190 2 5 1 0 19 38 9 5 
191 
Prime 


192 2 3 4 6 8 12 16 24 
32 48 64 96 
193 Prime 


194 2 97 
195 3 5 13 15 39 65 
196 2 4 7 14 28 49 98 
197 Prime 


198 2 3 6 9 11 18 22 33 
66 99 
1991 Prime 
200 2 4 5 8 10 20 25 40 
50 100 
201 
3 67 


202 2 101 
203 7 29 


204 2 3 4 6 12 1 7 34 51 
68 102 
205 5 41 


206 2 103 
207 3 9 23 69 


208 2 4 8 13 16 26 
52 104 
209 
11 19 


210 2 3 5 6 7 10 14 15 
21 30 35 42 70 105 


211 
Prime 


212 2 4 53 106 


.. CONFIDENTIAL 
· 
E-5 


E-6 


-GONFIDENTIAL 


Table E-3 (U). 
Factor Table (D)--Continued 


NUMBERS 1-400 --Continued 


213 3 71 
214 2 107 


215 5 43 
216 2 3 4 6 8 9 12 18 
24 27 36 54 72 108 


217 7 31 
218 2 109 


219 3 73 


220 2 4 5 10 11 20 22 
44 55 110 


221 
13 17 
222 2 3 6 37 74 111 
223 Prime 
224 2 4 7 8 14 16 28 
32 56 112 
225 3 5 9 15 25 45 75 
226 2 II3 
227 Prime 
228 2 3 4 6 I2 I9 38 
57 76 114 
229 Prime 


230 2 5 10 23 46 115 
231 3 7 11 21 33 77 
232 2 4 8 29 58 116 


· 233 Prime 


234 2 3 6 9 13 18 26 
39 78 117 
235 5 47 
236 2 4 59 118 
237 3 79 
238 2 7 14 17 34 119 
239 Prime 
240 2 3 4 5 6 8 10 12 
15 16 20 24 30 
40 48 60 80 120 


241 
Prime 
24 2 2 11 22 121 
243 3 9 27 81 
244 2 4 61 122 
245 5 7 35 49 


246 2 3 6 41 82 123 
247 
13 19 
248 2 4 8 31 62 124 
249 3 83 


250 2 5 10 25 50 125 
251 
Prime 
252 2 3 4 6 7 9 12 I4 18 
21 28 36 42 63 84 I26 
253 
11 23 
254 2 127 
255 3 5 15 17 51 85 
256 2 4 8 16 32 64 I28 
257 Prime 
258 2 3 6 43 86 I29 
259 7 37 


260 2 4 5 IO 13 20 26 
52 65 130 


261 
3 9 29 87 
262 2 13I 
263 Prime 


264 2 3 4 6 8 11 I2 22 
24 33 44 66 88 132 
265 5 53 
266 2 7 14 19 38 133 
267 3 89 
268 2 4 67 134 
269 Prime 
270 2 3 5 6 9 I 0 15 I8 
27 30 45 54 90 135 
271 I 
Prime 


272 2 4 8 I6 I7 34 68 
136 
273 3 7 13 2I 39 9I 
274 2 137 
275 5 11 25 55 
27 6 2 3 4 6 12 23 46 
69 92 138 
277 Prime 
278 2 139 
279 3 9 31 93 


2801 2 4 57 8 10 14 20 


28 35 40 56 70 140 


281 
Prime 
282 2 3 47 94 141 
283 Prime 


284 2 4 71 142 
285 3 5 15 19 57 95 
286 2 11 13 22 26 143 
287 7 41 
288 2 3 4 6 8 9 12 16 18 24 
32 36 48 72 96 144 
289 
17 


290 2 5 10 29 58 145 
291 
3 97 
292 2 4 73 146 
293 Prime 


294 2 3 6 7 14 21 42 
49 98 147 
295 
5 59 
296 2 4 8 37 74 148 
297 3 9 11 27 33 99 
298 2 149 
299 
13 23 


300 2 3 4 5 6 10 12 15 


20 25 30 50 60 75 


100 150 
301 
7 43 


302 2 151 


303 3 10I 
304 2 4 8 16 19 38 76 
I 52 


30515 6I 


306 2 3 6 9 I 7 18 34 5 l 


102 153 


307 Prime 


308 2 4 7 II 14 22 28 44 
77 154 


309 3 I03 
310 2 5 IO 3I 62 155 
311 
Prime 
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Table E-3 (U)i. Factor Table (U )--Continued 


NUMBERS 1-400 --Continued 


3121 2 3 4 6 8 12 13 24 
26 39 52 78 104 


313 Prime 
314 2 157 
315 3 5 7 9 15 21 35 
45 63 105 


316 2 4 79 158 
317 Prime 
318 2 3 6 53 106 169 
319 
1"1 29 


320 2 4 5 8 10 16 20 


32 40 64 80 160 


321 
3 107 


322 2 7 14 23 46 161 
323 17 19 
324 2 3 4 6 9 12 18 27 
36 54 81 108 162 
325 5 13 25 65 
326 2 163 
327 3 109 


328 2 4 8 41 82 164 
329 7 47 


330 2 3 5 6 I 0 11 13 22 


30 33 55 66 110 16$ 


331 Prime 
332 2 4 83 166 
333 3 9 37 Ill 
334 2 167 
335 5 67 
336 2 3 4 6 7 8 12 14 
16 21 24 28 42 48 
56 84. 112 168 
337 Prime 
338 2 13 26 169 
339 3 113 


340 2 4 5 10 17 20 34 
68 84 170 


341 l11 31 


3421 2 3 6 9 18 19 38 
57 114 171 
343 7 49 
344 2 4 8 43 86 172 
345 3 5 15 23 69 115 
346 2 173 
347 Prime 
348 2 3 4 6 12 29 58 
87 116 174 


3491 Prime 


350 2 5 7 10 14 25 35 
so 70 175 
351 I 3 9 13 27 39 11 7 
352 2 4 8 11 16 22 32 
44 88 176 
353 Prime 
354 2 3 6 59 118 177 
355 
5 71 
356 2 4 89 178 
357 3 7 17 21 51 119 
358 2 179 
359 Prime 


360 2 3 4 5. 6 8 9 10 12 
15 18 20 24 30 36 40 


45 60 72 90 120 180 


361 
19 
362 2 181 
363 3 11 33 121 
364 2 4 7 13 14 26 28 
52 91 182 
365 5 73 
366 2 3 6 61 122 183 
367 Prime 
368 2 4 8 16 23 46 
92 184 
369 3 9 41 123 


370 2 5 10 37 74 185 
371 
7 53 


372 I 2 3 4 6 12 31 62 
93 124 186 
373 Prime 
374 2 11 17 22 34 187 
375 3 5 15 25 75 125 
376 2 4 8 47 94 188 
377 
13 29 
378 2 3 6 7 9 14 18 21 
27 42 54 63 126 
3791 Prime 


380 2 4 5 1 0 1 9 20 38 
76 95 190 


381 
3 127 
382 2 191 
383 Prime 
384 2 3 4 6 8 12 16 24 
32 48 64 96 128 
385 5 7 11 35 55 77 
386 2 193 
387 3 9 43 129 


388 2 4 97 194 


389 Prime 


390 2 3. 5 6 10 13 IS 26 


30 39 65. 78 130 195 
391 117 23 
392 2 4 7 8 14 28 49 
56 98 196 
393 3 131 
394 2 197 
395 5 79 
396 2 3 4 6 9 11 12 18 
22 33 36 44 66 99 
132 198 
397 Prime 
398 2 199 
399 3 7 19 21 57 133 


400 2 4 5 8 10 16 20 25 


40 50 80 100 200 
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Table E-4lj-1. Table of primes up to 2000 (U) 


1 
139 
337 
557 
769 
1013 
1249 
1493 
1741 
2 
149 
347 
563 
773 
1019 
1259 
1499 
1747 
3 
151 
349 
569 
787 
1021 
1277 
1511 
1753 
5 
157 
353· 
571 
797 
1031 
1279 
1523 
1759 
7 
163 
359 
577 
809 
1033 
1283 
1531 
1777 
11 
167 
367 
587 
811 
1039 
1289 
1543 
1783 
13 
173 
373 
593 
821 
1049 
1291 
1549 
1787 
17 
179 
379 
599 
823 
1051 
1297 
1553 
1789 
19 
181 
383 
601 
827 
1061 
1301 
1559 
1801 
23 
191 
389 
607 
829 
1063 
1303 
1567 
1811 
29 
193 
397 
613 
839 
1069 
1307 
1571 
1823 
31 
197 
401 
617 
853 
1087 
1319 
1579 
1831 
37 
199 
409 
619 
857 
1091 
1321 
1583 
1847 
41 
211 
419 
631 
859 
1093 
1327 
1597 
1861 
43 
223 
421 
641 
863 
1097 
1361 
1601 
1867 
47 
227 
431 
643 
877 
1103 
1367 
1607 
1871 
53 
229 
433 
647 
881 
1109 
1373 
1609 
1873 
59 
233 
439 
653 
883 
1117 
1381 
1613 
1877 
61 
239 
443 
659 
887 
1123 
1399 
1619 
1879 
67 
241 
449 
661 
907 
1129 
1409 
1621 
1889 
71 
251 
457 
673 
911 
1151 
1423 
1627 
1901 
73 
257 
461 
677 
919 
1153 
1427 
1637 
1907 
79 
263 
463 
683 
929 
1163 
1429 
1657 
1913 
83 
269 
467 
691 
937 
1171 
1433 
1663 
1931 
89 
271 
479 
701 
941 
1181 
1439 
1667 
1933 
97 
.277 
487 
709 
947 
1187 
1447 
1669 
1949 


101 
281 
491 
719 
953 
1193 
1451 
1693 
1951 


103 
283 
499 
727 
967 
1201 
1453 
1697 
1973 


107 
293 
503 
733 
971 
1213 
1459 
1699 
1979 


109 
307 
509 
739 
977 
1217 
1471 
1709 
1987 
113 
311 
521 
743 
983 
1223 
1481 
1721 
1993 
127 
313 
523 
751 
991 
1229 
1483 
1723 
1997 
131 
317 
541 
757 
997 
1231 
1487 
1733 
1999 


l37 
331 
547 
761 
1009 
1237 
1489 


E-8 
'CONFIDENTIAL 


.CONFIDENTIAL 


INDEX (jl) 


Accidental repeats jnperiodic polyalphabetic systems ________________________ -: __________________ _ 
Addressee, see definition. 


Advantages of code systems _________________________________________________________________ _ 
- 
27 u • ••••JIJll•nr --------------------------------------------- "_.? ~--------- 
Alphabet: 


Cipher_~------------------------------------------------------------------------------- 
Components ___________________________________________________________________________ _ 


Dual, nature __________________________________________________________________________ _ 


Enciphering, use------------------------------------------------------------------------ 
:\Iixed cipher __________________________________________________________________________ _ 


.\1ixed cipher types _____________________________________________________________________ _ 


Plain---------------------------------------------------------------------------------- 


Plain co~ponent------------------------------------------------------------------------ 
P!ain, relation to cipher_ ________________________________________________________________ _ 


Reciprocal----------------------------------------------------------------------------- 
Reci proca.l ""' i!l verse a.iphabets _________________________________________ . ________________ _ 


Standard cipher------------------------------------------------------------------------- 


Ana.gramming: 


Para.gr3ph 
12-lb 


1-5-4 


P~"'~ 
1') - 
---) 


1.;-6 


•ttf.tllr~r: z 


1-8a 


7-2c 
- ., 
;-_a 
7-7a 
7-4c 
S-la 
l-Sa 
- . 
s-"'±a 
7-3a; 
7-Ga 
7-Dc 
- 
~:.. 
,--:::.v 


4-Sc(3) 


l-3 


,-. 
7-l 
- " 
1-·) 
- ., 
,-_ 


. 
' 
,-..-~. 


j_-.) 
,-_ 


7-) 


'-) 
- ' 
,- 


..;;-.·l 


~.aiJU t 
., 
------------------------------------------------------------- -~3c, 4-11 b (2) 
l 
4 
• 
~ 1 
-:-":%, -::-- ~ • 
4--lla, 4-11 b ( 1) 
4- : () 
~~ 
,..,.._..,... •. ~. 
4-Sb 
,;,-,;, 
'!':igra.phs, use _________________________________________________________________________ _ 
4-3c 
-,· owei-consonant ra.:io __________________________________________________________________ _ 
~-~c 


...i.nal~sis: . . . 
. 
_ 
.-1.peno01c c:pher~ ______________________________________________________________________ _ 
1~4b 
1~3 


Cocie charts ___________________________________________________________________________ _ 
:s-9a 
j.•._:; 
Digraphs in ap~dic ciphers _________________________________________________________ _ 
14-0c 
'. 
J ---- 
~ 
Four-squares cipher systems _______ . _____________________________________________________ _ ll-2a, l!-3c: ll-!. il-.; 


Horizontal two-square systems ___________________________________________________________ _ 
ll-Oa 
11-' : 


Iciiomorphs in aperiodic cipher-: __________________________________________________________ _ 
14-oo 
14-: ~-) 


i~~~~~~e~~i~~~7e!~l :~-::~o!~c- ~i~-h-e~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ = ~ ~ ~ = = = = ~ ~ ~ ~ ~ ~~ ~ ~ = ~ ~ = ~ ~ = ~ ~ ~ ~ = ~ ~ ~ ~ ~ ~ ~ ~ = = = = 
14-7a 
1 I 
, ."1 
"±--- 
9-12a 
:1-!:3 


Keying units in aperiodic ciphers _________________________________________________________ _ 
l~.)c; 
1-±-~ 
Polygraphic substitution ________________________________________________________________ _ 
ll-la 
ll- i 
Probable words in periodic ciphers ___________ ------------------- _______________________ .. _ 
13-7t: 
1"' 
' 
,)-') 
Stacked cycles in aperiodic ciphers __________________________________________________ c ____ _ 
14-6a 
1-±-) 
Superimposed text in aperiodic ciphers ____________________________________________________ _ 
14-6c 
.. 14-l ';) 
Syllabary spelling in matrix codes ________________________________________________________ _ 
15-l1b'2) 
L~1l 
Syllabary squares--_: _________________________________________ , __________________________ _ 
15-10a 
1:-i-9 
Symmetry of position in aperiodic ciphers _________________________________________________ _ 
14-4c 
14-4 
Text beginnin~~in apeJ:iodic ciphers _______________ ~ ____________________ . ________ : _________ _ 
14-Sb 
14-!4 
\" ertical two-square ___________________________________________________________ : _________ _ 
11-oa 
11-ll 


Vowel-consonant relationships _______ -------- _______________________________ ~-~~~ ________ _ 
8-14a 
8-13 
Aperiodic polyalphibeti"c substitution _________________________________________________ .,.__= _____ _ 
1-12b(2) (b) 
1-6 


Aperiodic ciphers: 
Analysis ________________________________________________________________________________ _ 
14-oc 
14-10 


Idiomorpns: ___ ~-------------------------------------------------------------------- 
14-ob 
14-10 
Interrupter letters _________________ ------- __________________________________________ _ 
14-la 
14-12 


lee~;ng units----------------------------------------------------------------------- 
14-5a 
14-8 
Stacked cycles _____ -------- ____________ ------- _____________ . ___________ :-~ __________ _ 
14-6a 
14--9 
Superimposed text------------------------------------------------------------------ 
14-6c 
14--10 


Text beginnings--------------------------------------------------------------------- 
14--Sa 
14--14 
Arbitrary group encipherment_ __________________________________________________________ _ 
14-3b 
14--3 


~AaiC"i:"'-••-• a • 
~UNr 
IUCII'I IIAL-. 
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Cipher sequence, juxtaposition ____________________________________ --------- ______________ _ 
Cryptographic classification _____________________________________________________________ _ 


Principle of aperiodicity _________________________________________________________________ _ 


Produced: 
Arbitrary group enciphermenL _______________________________________________ ~ ______ _ 
Successive word encipherment _______________________________________________________ _ 


Variable group encip hermenL _______________________________________________________ _ 
Repetition: 
Partial periodill:_ .. -_:--=-:.." _--::- ____________________________________________________________ _ 


True periodic .. .._ .. _____________________________________________________ ~~ _____________ _ 
Suppression of periodicity _______________________________________________________________ _ 


Application: 


Cryptograpl'Jc systems ___________________________________________________________ "& _____ _ 
Transposition systems _______________________________________________________________ ~ _ : _ 


.. ~.:fZZ"rj ~· 
$"" 
- 
• 
~ 
.... 
'\N A U 
«Gfi¥#~ Ji¥ £. A 
~ . 4!#. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 
Biliteral substitution:· - 
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Identification _________________________ ~------------------------------------------------- 
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Process _______________________ -------------------------------------------------------- 
Simple ________________________________________________________________________________ _ 


\Yith variant5 .. _________________________________________________________________________ _ 


Biliteral systemo: 
).fatrix dimensions _________________________________________________________ ____________ _ 


Recovery of matrix _______________________________________________________ . ____ _ 


Blanks. use of. in monom~ .. dinomC' systems _________________________________________ 
________ _ 
Book codes. classificn.tiori- of _________________________________________________________________ _ 
••-:·IIi· •· ·· ~ ::---11·-.:XIJ:..!ii:"' -1-~- ..., :.1! 
-s;.,;.ri 
.,·,--:-~~"N.s"- ---- -- --- --- --- - -- ---- ----- -- ---- -- -- - - - - - -- - - -- 


Categories of placeipent in Playfair ciphers ____________________________________________________ . 
Causal repetitions in pe.riodic polyalphabetic systems ________________________________________ ~:... __ 


Chaining equivalent values in multiliteral sys•ems ______________________________________________ _ 
Characteristics: 
Four-squ!lre dif;r3.phic systerr1s __ ------------- ____________________________________________ _ 


~~~~:a:~~~~~~:~' si~b~~r:~~~n~;~~~~-----~~~~::~ ~:~: :::::::::::::::::::::::::::::::::::::::::: 
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?oivalohabetic: 
__ 


- ::'lfonoal-phabeticity _ ~ _______________________________________________________________ _ 
Substitution ______ ._. ______________________________________________________________ _ 
o hermen L _______________________________________________________________ _ 
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Cipher alphabets: 
Alphabetic sequence ____________________________________________________________________ _ 
Components ____ ---· _________________________________________________ - - __ - ___ . _____ - - - - - - - 


Configurations oi, pol)·alphabetic _________________________________________________________ _ 
Decimation of, mixed ___________________________________________________________________ _ 


Derived from, poiyal ph~oetic _____________________________________________________ :-______ _ 


Identification: 
-- 
.,._ 


Pa.ragraph 
Page 
l+-4c(:: 
14-4 
14-lc 
14-: 
14-la 
14-l 


14--:~6 
14-:) 
14-2c 
14-l 
14-3c 
1-J.-2 


14-3c 
14-:3 
14-36 
14-0 
14-19 
14-i 


2-li 
,, -- 


f 
1'1 ... 
l-1--... 
1-6 


Y{ll' IF .,. __ -- 
D-70 


0-7~ 
9-6c: 
9-:)a. ::· 


,-l-~r 


,J_"_ 


~l- .:, : 


:1-l.-. ·: 
1.-.,-l ~ 


~)-.) 
!1-:, 
0-:, 


~l-:.: 
r,_ 


(j_", 


~~-~ 


f;_-:- 


~~-r1 


' .. _ 
~ ' 


.\j -V~ 


:r·l-0 :· 
; (I-.; 


.... _-, 
·- 
1-: 


i.l- 


~ :;-· 
._' 


··-~~~~ 


:::;-l;; 
._, 


;..U- 
'; -.-~ 
~ 
~J-17~ ··-,. 
~}-·~~ 
:2-l!- 


to) 
• 
~--~ 
8-4a. "'--i·'/ 
1'2-4a< ·2 


~-n 


- 
' 
,-_ 


I ·)_,.i 


"'--~. '-:) 
l'.!·<i 


Direct standard __________________________________________________________ ~:-:=--:______ 
:2-l :.:c 
Periodic cipheiZ':. ____________________________________________________________ lJ-ld, 13-l:2a. 13-l:),; l.)-l 
:2-9 
1:)- ~5 


Reversed :<tandard_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
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1:2--J.a · ! 
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Patterns in transposition mixed _________________________ --- ___________ -------------------- 
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Randomly mixed·-----------------------------------------------------·----------------- 


Reci procal keyword mixed __________________________________ ----- ___ --------------------- 


Relationship cipher to plain _________________________________ ----------------------------- 
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~-:)h 
7-4a 
1.• • ' 
--'"t:_) 
S-lc 
S-:2a 
7-Ja, 8-'2b 


~-~~ 
l·l 
•1 
'_-.) 
....,_1 


7-~ 


~-:; 


- ·• 
·-- 
1:2--! 
"-l 
"-I 
7-2. S-l 
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Cipher alphabets-Continued 
Standard------------------------------------------------------------------------------- 
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Cipher systems: 
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Four-squar~jdenti~catlon ______________________________________________________________ _ 
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Cipher table-------------------------------------------------------------------------------- 
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Ratios in monome-dinome systems _______________________________________________________ _ 
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Cipher alphabets ___________________________________________________________________ _ 
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Cipher 
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Code charts: 
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Classification __________________________________________________________________________ _ 


Code systems: 
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.~.s..lysis: 
Code cha:ts _______________________________________________________________________ _ 


.3dl2.bar:· squan~s------------------------------------------------------------------- 


Book codes----------------------------------------------------------------------------- 
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:'I 1a t:-ix codes: ::::;- ~ 
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Identifics.ti?TI--- ____________________ . _____________________________________________ _ 


Reconstruction .. ------------------------------------------------------------------· 
One-part codes ________________________________________________________________________ _ 
Open cooes ___ : ___ _. ____________________________________________________________________ _ 
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.-\ssociation in g.nagramming _____________________________________________________________ _ 


Isolation of,.irt ciphertext_ ________________________________________________________ -_- ___ _ 
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Paragraph 
Page 
'i-4b 
7-2 
8-3a 
8-2 


8-1a. 8-1b 
8-1 
12-4a(1) 
1:2-3 
1-9a 
l-3 
11-3a(2) 
ll-4 
1-9a 
l-3 
14-4c(2) 
14-4 


11-2a 
11-1 
11-ia 
ll-14 


11-4a 
ll-8 
l-9a 
1-3 


lS-lOc 
:.'>--10 
9-15a 
9-18 


S-2b 
S-1 
~-- 
12-6a(3) 
1:2-.> 
3-:2 


:5-9c 
l.S-2e 


:.s--±c 


lS-9a 


~ .. 
1 - 
10- .. ua 


:5-10 
l-9b 
l.5-2e 
l5-0c 
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:.~:-7: 
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:.=-la 
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;.=.-9 


. ':: 
" 
.,-~ 
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ll-6a(3) 


~Sc 


.. 
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9-ie 
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-- 
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~4 
- 
~-1 :2 


' - 
-:.-J 


~-6 
4-7 
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:2-~ 
l-:2 
l-'2 
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5--18 ... 
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1)'" se of~ ge-TI"er-~1-------------------- ---- - -- ---- - -- ----- ---- - -- - --- - ---- - - - -- -- - - -- -- - - 


Dist:ibutions: 


Dinomic, of muitili teral systems _________________________________________________________ _ 
Frequency, variations ___________________________________________________________________ _ 


~--------------------------------------------. -- . - ---------- 


Elimination on genera trices in periodic ciphers _________________________________________________ _ 
Enciphered code __ ~_,_.:=------ _________________________________________________ _ : ______ ----_ 
Enciphered codes; ctasslficl!.tion code systems _______________________________________ ~ __________ _ 


IWI.iiitl:l't•atillllllillW! 
""~ 


-CONFIDENTIAL - 


Paragraph 
10-6a 
9-12d 
9-7e 


il-3d 


10-7a 


10-3a 
10-3d 
10-3b 


1 0--2e 
10-8a 


4-llb(2) 


ll-7d 


4--~c 


~L8c 
9-12e 
ll-5a 


2-12c 


l3-9b 


13-lOa 
13-lOrl 
\)-4 
l-lOa 
.)- i c 


S-13a 
l0-lle 
5-l.fc 


7-l :a 
:2-llc 
7-:10 
:::-: :c~ 
·:-1::: 


~.:}- l :.:c 


~-13a, ::-130 


13-5b 


l-9c 


15-3a 


ll-7b(3) 


11-ic 
ll-7b\l) 
11-/0( 1) 


7-7a 


10-5b 
10--!d 
10-5a 


Pago 
10-6 


9-13 
9-6 
11-6 


10-6 


10--3 
10-4 
10-3 
10-3 
10-6 


4-ll 
11-J.i 
4-4 
9-7 
9-:-1 
11-S 
2-9 


I:3-9 
13-9 
1" ',, 
·)- 
~ 
~· 
Q_-l, 


.-j-1 


'S- ~: 
•,- '!) 


~-l-i 


~-6 


:.:-o 


~-l.; 


~-+} 


13-6 


1-4 
!,)-.) 


11-1.5 
Il-l,) 
11-14 
11-14 
- " 
t-u 


10-.'5 
!0-.') 
10-.') 


Index 5 


~t"\1\1 1:"1 nE"NT! A I 


Encipherment ~o!Waphic-Continued 
!3 t •• 2 ----------------------------------------------------------------------- 
Variant forms--------------------------------------------------------------------------- 
Encoded ciphe~---------------------------------------------------------------------------- 
Encrypt, see definitions. 
' 


English uniliteral frequency distribution _______________________________________________ ~ ~ _____ _ 
Equivalencies, cipher co pbin, in syllabary code~--- ____________________________________________ _ 
Equivalent values: 


By chaining---------------------------------------------------------------------------- 
systems ________________________________________________________ -""' __________ _ 


..... 


.bxpansion of digraphs in anagramming ___________________________ . _. _______ . _________________ _ 
Expectation test, dig:raphic, blank ________________ . ___________ - - - - - - - - ______ - - ________________ _ 


Exploitation of cryjnographic systems _________________ . __ ._--------------_----- __ - ___________ _ 


External cyclic phenomena in po!yalphacetic systems ___________________________________________ _ 


E:nernals, see definitions. 


Factor analysis: 
In periodic ciphers _____________________________________________________________________ _ 


eeriodic ciphers---------------------------------------------------------- 
.,. .. 


periodic it~- _____________________________________________________________ _ 
?le:tibility of crvptographic svstems ___________________________ - _-. ___________________________ _ 


Fle:'{ible poly-alphabetic periodicit~;. ___________________________ ·_---- __________________________ _ 


~our-5quarc matrix. digrJ.phic .suOstit~tion _____________________ --- ________________________ :- ___ _ 


?our-square cipher syst'"ms: 


Analysis-.------------------------------------------------------------------------------ 
Digraphic: 
_ 
Idiornorphs ________________________________________________________________________ _ 


Patterns--------------------------------------------------------------------------- 
Identification __________________________________________________________________________ _ 
::\fatrix recovery __________________________________________ - _ - _____________________ -______ _ 
P!z.cemen t of c: pher equi valent.'3 __________________________________________________________ _ 


vv·ord assumptions ______________________________________________________________________ _ 


Freauencv distribution: 
-)[ o~al theor.etiCal deviations ___________________________________________________________ _ 
Profile in rnultiliteral systems ______________________________ : ______________________________ _ 


Triliteral ______________ ~---------------------------------------------------------------- 
Variations _____________________________________________________________________________ _ 


Fundamental operations of cryptanaly3is ______________________________________________________ _ 


General: 


Crvutographic svstern __________________________________________________________________ _ 
····-··- 


w.ow;w -- 
- ---------------- ----- - - --- -- --- - - ----- - --- - -- - -- ------ - - - -- - - - - 
Genera trices, periodic ciphe~: 
Elimination ___________________________________________________________________________ _ 


Logarithnllc test------------------------------------------------------------------------ 
Selection ______________________________________________________________________________ _ 


Geometric design of transposition matrices ___________________________________________________ _ 


Grille: 
-------------------------------------------- -·-------- "3...,....--- 


--------------------------------------------------------.---- 


Transposition--------------------------------------------------------------------------- 
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Par"!;!'aph 
P:ll?e .... 
10--!a 
10-4 


1-9c 
l-4 


2-llb 
2-6 
l.'i-1 Oc 
l.i-10 


9-12g 
9-l.i 


9-llb 
'cl-12 


-. 
--··- ~ 
I' 


~~·' ~ 
:~~?;~·-,~· .. "•r):- 
• 
-- 
'· 


-!-lib( 2) 


ID-6rr 
:2-:3 
12-:3b 


13-11 b 
13-:2d 


,., 
.. 


-!-1! 
!()-'} 
'2-:.2 


! :2-:; 


l :~- 
~ \] 


1') 
.) 


l·)-~ 


.:: 
..... - 
: 
~-~ - 
-~ 
:+;- 
·~ -::~-. ~. !"[~~ 


12-36(1) 
2-!c 


l~-Jbl ~) 
1C-3a 


l!-2.::. ll-3a 


11-::lli 
ll-:2d 
11-:::b 


u-:;~ 
11-.)ai::!) 
ll-:3cll 


-:!-136 
9-lOb 
8-13a 
2-13a 
-:!-4b 


13-.jb 


13-6a 


13-Sa 
3-4 


~ l.- !.. 


l 
•l 
·) 
--·) 


-..:- .~ 
: ,, 
' 
l.'_'-,) 


: l-·i 
': 
- 
~ .. -, 
. ' -- 
: :-6 


2-\..) 
'J-!0 


~-11 
2-'.J 
:2-3 


13-d 
13-6 
13-.1 
:3-l 


·- 


<CONFIDENTIAL 


----------------------------------------------------------------------- 
' 


~--·--- -------------------- - --- - - - -- - - ------ -- ---- ----------- -- -- ---- 


Horizontal: 
Two-square matrix, encipherment ________________________________ - ____________ -o __________ _ 
Two-square matri."l:, analysis __________________________________________________ ·_~-- ________ _ 


Aperiodic cipher, numerically keyed _________________ ~ ____________________________________ _ 
Biliteral substitution ___________________________________________________________________ _ 


Cipher alphabets: 
Direct standard ____________________________________________________________________ _ 


, ..... 


10-:3b 


11-6a 


10-3 


11-11 


~.;;..-... . 
~/ :\- 


14-4a 


9-6a 


::Z-12c 


l~-3 
9-.) 


2-9 


PeriodiC-------------------------------------------------------------------------- 13-ld, 13-l:a 13-1.13-13 


Reversed standard________________________________________________________________ 
::Z-1 ::Zcl 
·' .- 


Code systems, rna trix ____________________________________________________________ . ______ _ 


Digraphs, Playfair ciphers ___________________________________________________ -.- __________ _ 


Digraphic systems ______________________________________________________________________ _ 


Four-square matrix cipher systems _________________________________ . ____________________ ._ 


Incompletely filled matrices __________________________ . ______________________________ - ___ _ 
),fatrix codes tbreugh code groups ___________________ . _ . __ - _________ - _ - _________ - _ - - - - - - - - - 


),!onoalphabetic substitution __ ------------- __________________________________ ::- __________ _ 
),fonoalphabetic mixed substitution------------------- - - ------------- - ---------------- ---- 


),1onome-dinome systems___________________________ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ .. ____ _ 


N onmonoalphabetic substitu~ion __________________________________________________ .": _____ _ 


~tra. __ __ si~-~j;~ 
- 
-r· .. sli .. trr~--~- ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ :: :: :: : 
~:::::-:: ~:: ~ ~:: ~ ~ ~ ~ ~ ~ ~ ~: ~ ~ ~: ~ ~ ~ ~: 


Two-square mat'F.X-cipher systems _________________ .. __ . _________________________ . _____ --- 


L'niliteral substitution ____________________________ .. __ . ________________ ----- _____ -------- 
Idiomorphism in aperiodic ciphe:o, analysis _________________ ._. ________________________________ - 


Idiomorphs: 
Analysi.:!. of, i:l >~.periodic ciphers __________________ ....... _________________________________ _ 
Appearance oi, in Playfair ciphers ____________________ .... _____________ -------------- ____ _ 


Four-square digraphic ___________________________ . ____ . _________________________________ _ 


VVord patterns derived ________________________________ . --------------------------------- 


IncompletF!ly filled matrices: 


Identification ______________________________________ ·--·-·------------------------------- 


Recovery __ ·- _____________________________________ ..... _ . ______________________________ _ 
Independent or unrelated polyalphabetic cipher alphabets_._. 
. _ .... ______________________ ------ 
Index of coincidence, use of, in: 


l\Ionoalpha.betic mixed substitution ______________ .... 
Polyalpha.betic substitution ________________________ . 


»~_aonx ________________________________ . _ .... _______________________________ _ 


Intercept Vf-"'-'"' ~u·~~----•- ______________________________ . _ ~ ________ - _- - ---- ----- -------- - - - _ 


Interrupter letters, analysis of, in aperiodic ciphers ______ .. _ ... _ . ____________________ ~ __ . ________ _ 


Invisible or unintelligible writing __________________ . ____ . _ . _____ . _______________ ~ _-:: __________ _ 
Isologous segments- in multiliteral systems _________________ . ___ . ______________________ ., ________ _ 
!sologs, analysis of, in multilitera! systems ______________ . _ ... _______________ ------------------- 
Isomorphic patterns-in multiliteral systems ____________________ ~ __ ._----------------------------- 


~__,_ 


Juxtaposition: 
Cipher alphabets, periodic ciphers ____________________ - - - - - - - - _ -- - -- ---------- ----------- -- 
Cipher sequences, aperiodic ciphers ___________________ ------------------------------------- 


Columns in ma.tri:;: recovery _____________________________________ -----------_------------ 


_. l1ANF"IOI::NTIAL 
- 


1S-7a 
11-/r/ 
10-"a 
ll-2a 
4-3b 
1.S-7h 


~-l2b 
S-lOa 
9-l."ia 


'2-l~b 
:2-l2a, 4-6a 


1":- 
J..J-j 


1 :-! .-, 
lfl-t3 
.. 


·.._·-"' 


"-" 


IJ-l:~ 


~-"' 
:2-7. -±-3 
.... 


tc~ ... ~ ~--~- 
~'""$.. ~ 


!l-4a 


7-lOa 
l-±-4c 


14-61:> 
ll-Sa 
:!-:3d 
"-1.5c 


-t-3b 
-±-lOb 
12--±all l 


"-llr 


12-l~a 


l-"' 


~ -:-.....:: 


l-4-10 


ll- ~6 


-~-i.ti 


-t-1 


~-0 
1:2-:) 


....._:~ 


!:2-:1 


~.,i;~t. 
11--t 
-·· ··.·•· "i-· )1·;· 


~-4a(l)(a) 
2-2 
" 
14-7a 
14-12 


l-5d 
1 .• 
-.) 


U-12c 
~·-! :) 
9-12a 
t)_t·l 
.... . •) 
V-lla 
0-12 


13-13a 
13-1;) 
14-4c(2) 
14--± 
4-lOd 
. - 
.. -. 


Index 7 
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Key: 


~::::~~~a;:!~~~~;~~:~-~~~~-~~~-:~:~-~:::~:~~:~~::: __ ~-:~~:~~~~~~:-:~~::::::::::::::::: 


Transposition, recoverv 
_ 
---------------- 
Key 1"Pcovt>rv 
. -- ---------------------- - --- - - --- --- ---------------- -- ---------- - 


sequence------------------------------------------------------------ 


Keyed columnar trans!}osition:- - 
"" 


Operation.------~--------------~------------------------------------------------------- 
Security ______________________________________________________________________________ _ 


Variations ________ ---- ___ -- __ - __ ---------------------------------------------------------- 
Keying units, analysis of, in aperiodic cipher. ______________ ----- _----- __ -- ____ - ______ -_ ~~ _------ 


Keyword based -decimation, mixed sequence ________________ ----------------- __ --- ____ ---------- 


Keyword mixed: 
Cipher J.lphabets reciprocaL •• ________________________ -----_----- __ -- _____ -- _____ - _____ --- 


Sequenc~ recoverr---------------------------------------------------------------------- 
Lambda (blank): 
Expectation test------------------------------------------------------------------------ 
:\Ionoalp habetic mixed substitution. :1se ___________________________________________________ _ 


Language determination in cryptanalysis ______________________________________________________ _ 
Latent cyclic phenomena in polyalphs.betic systems __________________________________________ - __ 
Letters: 


A.nagramrning _________________________________________________________________________ _ 


Classification of periodic ciphers_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
Positional limitations of le~ters: 
Four-square ciphers __ ------- _______________________________________________________ _ 


?layf air cipher _____________________________________________________________ -________ _ 
Literal key selection _______________________________________________________________ ~ ________ _ 


Logarithmic :est for generatrix selection in periodic ciphers ______________________________________ _ 


Long-term security _________________________________________________________________ --= __ :· ___ _ 


:\Is.cbin<" cinbers __________________________________________________________________________ _ 


}fe.tch deterrr:.in.a.t.ion ~n multiliteral systems ___________________________________________________ _ 
}latching, pn!1ciples of. ir1 periodic ;:lpners _____________________________________________ -_______ _ 
:·,fu.tching variants by f:equency in :nultiliteral system:: ________________________________________ _ 


:\Iatrices: ' 
Columns.: order of. in ~~·o-square 5ystem __________________________________________________ _ 


Cyclic perrP-utations of, in Playfai:- ciphe!" _________________________________________________ _ 


Dimensions: 


Bili teral systems ___________________________________________________________________ _ 


Geo~etric d~~~------::~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 


Horizon tal two-square systems ___________________________________________________________ _ 
Identification of incompletely filled. ____________________________________________________ -_ 
Juxtaposition of columns ________________________________________________________________ _ 


Recovery of, in: 
BilitenJ systems ___________________________________________________________________ _ 
Four-square'systerns _______________________________________________________________ _ 
Incompletely filled _________________________________________________________________ _ 


Code systems: 
Classification ______________________________________________________________________ _ 


Identificatio~--------------------------------------------------------------~-------- 
Reconstruction ________________________________________________________________________ _ 


~1eans of communications, see definitions. 


:Message: 
Center, see definitions. 


Text, see definitioll!l. 
. , 
,..u•tt·-:·:- •·=- ·· · · -a-_··J:il.: n,llrb 
----------------------------·~------------------------ 
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Para;;raph 
3-!0b 
3-lOc 
!-lOb 


2-7 


4-.') 


3-llb 
3-I::!a 


3-13 


H-5a 


~9b 


S-2a 
'.-66 


::!-1-±a 
"-lla 


'.:2-.:-~a 
1:2-:30 


4:-l :cz 


~:J-::.2d 


li-30 


~ ~ -7 c 


3-l Oc 
13-0a 


'2-~b 


,:.-~c 


~-lO(" 


l~-lSc 
9-l !)G 


ll-6c 3l 
1:-qa 


9-Sb 


P:ll?e 
3--'i 


3-.-} 


1-4 


~--t 
4 ., 
-,, 


:)-6 
:)-6 
:)-7 
l.f->\ 


~7 


~-1 


~-4 


::!-!0 
'-4 


·) 
·) 
_-.) 


l•\ 
' 
'--·) 


-t-ln 


l·J-l"t 


i. 
~ 
; 1-;:, 


,)-.) 


1•> 
• 
•v-O 


~-l 


}-:: 
tj_:: 


'' 


:~-~. 


ll- ~ 
ll-:2(] 


~-7" 
,. 4-7a 
.,. 
-!--;) 
••r•·~-1' 
10-3b 
4-3b 
4-lOd 


1- 
•) 
;r--_a 
15-ib 
15-Sa 


1 Q--:) 
-!c-1 


~-7 


':?-6 
11-i 


1- 
" 
.-,..._ 
15-S 
15-i,: 


.ccoNFIDE:NTIAL.. 


Military terminology as stereotypes ______________________ • __ . ________________________________ _ 


Minimum-maximum column length _____ . ___________ •• _. _________ • ___________________________ _ 


Mixed alphabets, characteristics of, periodic cipher ___ •• ___ .. _- .. _ .• _ ... ________________________ _ 


Mixed cipher alphabet: 


Sequences: 


I>ecimation •• ~----------------------------------------------------------~---------- 
~eyword mixed·-------------------------------------------------------------------- 


~andomly mixed------------~------------------------------------------------------ 


Transposition mixed ... -------------------------------------------------------------- 


Paragraph 


4-12a 


4-lOd 


13-9a 


Page 


4-13 


4-i 
13-9 


~2 
'i-! 
S-i 
"-'2 


Types_ -·~·;~-~~"--=-~-- •. ---.-- ____ . ________ ••. ___ ..•• _. __ ..... _ .. --- .. - ..• _. _.. 
i'-4a, S-la, 


S-4a 
S-2a 
S-lc 
s-3a 


~-lb 
7-2. ~-! 
:.Ionoalphabetic substitution: 
"" 


Characteristics_~-~---.• ________________ • __________________________________________________ _ 


Identification __________________________________________________________________________ _ 
::\Iethods oi solution___________________________________ _ _____________________ ~ ________ _ 
Systems-------------------------------------------------------------------------------- 
::Vfonoalphabetic substitution, mixed cipher alphabets: 
Identification __________________________________________________________________________ _ 
Index ()f coincidence ____________________________________________________________________ _ 


Lambda test_ ______ .... ____ ._. _______________ ._. ___ . __ .. ____ . __ . ___________________ . ___ _ 


Phi test.------------------------------------------------------------------------------- 
:\Ionographic substitution systems ..... _______________________________________________________ _ 
:\Ionome-dinome: 
Cipher to plain ratios ___________________________________________________________________ _ 
Identification and characteris(ics oL ••.. ______________ . ____ . _______ . _____ . _____________ . _. _ 


·c se oi blanks in. ________________ . __ . _________________ . __ . _____ . _________ .. _ . __________ _ 


~.Ionome-dinome-trinome-systems: 
Charactenstics oL ___ • ________________________ . _______________________ . _____ . _. ______ . __ 
Solution of ____________________________________________________________________________ _ 


7 -lc 


'2-!'2b 


7-.~a 
l-l'2hl 1) 


><-lOa 
'i-llc 
i\-1la 
'--1lb 
1-1'2bi 1' ,a; 


D-l .lr: 
Q-l .-JC 
0-l.)(t 


9-16a 


'i-l 
2-" 


- 
< 
,---:- 
1-o 


..;._, 


'i-9 
'--9 
."--9 
1-i) 


ll-l" 


q_~IJ 
n_l, 


9-:::: 


(]-16iJ 
()-'2'2 
...... 
'11=-- 
l·l_l!:.,.lll·'·· :1-~-i-· 
· ·. ·gnt.lll--------------------.--------------------- 
:\1Ult1 'teral substitution: 
lin :ill'"fJ! 


,_,:;>/}:" 


Analysis ___ • __ • ~ • -_______ • ______ • ________________ •. _ _ _ _ _ . _ . _ . __ - . __ . ____ . _ . _ .... _ ... ___ - 
&-.'ic. 
Chaining equivalent values ______________________________________________________________ _ 
fl-:2q 
Classi.frcation ____________________ • ________________________ . _____________________________ _ 
·,1-lb 


Determination of match ______________________ ._____ _ _________________ . ______ .. _____ . ___ _ 
1,2-i(ic- 
Dinomic. distrib\1.tiQns ________________________________________ . _______ . ________________ . __ 
:1-l:> 


Disadvantages.~--------------------------------------------------------------------- 
(j_~ 


Equivalent value~- ________ . ____ . __________ . _____ .. ______ .___ _. ______ . _________________ .. 
Cl-11·'· 
Frequency profil~- ________________ . ________________ . ________________________________ . _ 
il-l()h 
Isologs, analysis _______________________________________________________ . __________ ... __ ._ 
''-l ::., 


Isologous segments ______ . _____ . ____________ . ________ . ______ . ____________ .... __ . _________ . 
·L; 2.~ 
Isomorplfic patterns ________________ . ________________ . _____________ . ___________________ . _ 
:l- l 1 r: 
:\latch determination _____________________________________ •• _____ • ___ . ______________ ._._. 
'.'-1 Uc 
),fn.tching variants by frequencr ________________________________ . ________________________ . 
~l-1 i)a 
Security_______________________________________________________________________________ 
;)_ l r 
Systems ___________ -------------- _____________________________________________________ l-12b(l) a 
.,, 
:\Iultinomic systems: 


Classification ________________ • _______ • ______________________ •• ___ • _________________ . __ ._ 
:J-13: 
Columnar numeric: 


Analysis _______________________________________________ . ____ . ___________________ . _ . 
9-l4d 


Q-~ 
(!-: ,-, 


(;_ 


~~- ~..;; 


C)-C:: 
,,_ 


:J-::_:; 


~ ,_ ~ :) 
r:_ ~ .-. 


~)- l: 


~~1-~ 
0-l 


1-6 


U-16 


9-11 


>I 
... 
'·"' 
.. 
--::\. 
~ - 
.. 
. 
. - 
.·~ ··. 
;_,:~:---=- 


' 
,._,,,,=-·,.... 
' 


N oxi.monoalphabetic substitution, identification __________________ . _________ . __________ .. ____ . __ . 


Nonreciprocal tables, polygraphic substitution ________ • _________ • _______ • __________ ._.,. ________ _ 
Normal deviation of-Uequency distributions. ______________ • _______ . _________________ ~._. ______ _ 


Numeric variations of polygraphic encipherment. ____________________________________ :_. ___ . _. _. 


Numerical key, derivation of __ .----------------- ______________________________________ . ___ . __ 


Numerical key in columnar transposition ______________________________________________ :: ___ . ___ _ 


Operation: 
. 
. 
e:.:·1-.l"'l·.••-••-•• 1- !- --------------------------- --~ .-_-__ - -----~ ------------------.---------- 
~eyed columnar transposition __ • ________________________ • _________ • __ • ________ • __ •• _. ___ _ 


Polyalphabetic substitution _______ --------- __________ ------ _________ • ___ • ____ • ______ •• _. __ 
Simple grilles--------------------------------------------------------------------------- 
Transposition systems __________________________________________________________________ _ 


Originator, see definitions. 


Origins of secret communications _____________________________________________________________ _ 


-cONFIDENTIAL 


\ 
I 
"'- 
.. 
'/:::_::' _, 
) 


'2-12b 
:.?--..: 
10-'2c 
10-:2 
2-13b 
:2-~} 
10--td 
10-.i 
3-101> 
:)-:} 
3-!0a 
:)-.; 


~··.~"": 
....... -. 
3!:'fi;- 
3-ti 


1 '2-2b 
6-'2b 


3-6a 


1-6b 


1 <)_•) 


6-1 
3-3 


1-:.? 
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Partial periodic repetition in aperiodic ciphers __ ------------------------------------------------ 
Patterns in transposition-, mixed cipher alphabets ______________________________________________ _ 
'''. •11•• 


1 


. • -•~•- •;na ••.---.----------------------------------------------- 
PeriOd i!mma.twn m pen odic polyalphabetic Ciphers _________________________________________ _ 
Periodic po!yalphabetic systems: 
Accidental repeats ____________________________________________________________ : _________ _ 


Analysis: 
_ ·_ 


Psmgraph 
l4-3c - 


12-6a ( 1) 


12-ia 


Facton-----------------------~---------------------------------------------------- 
· 13-11b 
Probable words--------------------------------------------------------------------- 13-ia, 13-Sa 


g;;~:; :~~!~t~~~;~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 
12-~~~~ ~ 


Completing the plain component____________________ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
13-4a 


Determination of cipher alphabet_ 1 
________________________________________ 13-1_c, 13-1 Oa, 13-lld, 13-13a 


Direct symmetry of position _____________________________________________________________ _ 


Factor analysis ________________________________________________________________________ _ 


Generatrix: 


Elimination------------------------------------------------------------------------ 


Selection ____________ r-------------------------------------------------------------- 
Identification __________________________________________________________________________ _ 


Juxtaposed sequence~-------------------------------------------------------------------- 


L ette!" clas.silica ti on_____ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ _ 


Logarithmic test generatrix selection ___________________________________________________ _.... __ _ 


llatching __________________ 1 
___________________________ -------------------------------- 


~latrix reco'\·er!- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _________________________________________ _ 
Period determinn.tion ___________________________________________________________________ _ 


Repeat~ng key ____________________________________ -------------------------------------- 


S11bstit~lion ___________________________________________________________________________ _ 


Trilitera.l frequency ciis:rihution ________________________________________________ -~ ________ _ 


t 7nilitern.l terms a..s ::pecial solutions _____________________________________________ -_________ _ 
Periodicity: 
- 


Cons tan~ interval ___________________________ .- _____________________________________ :~ ___ _ 


De!e!":llination _________________________________________________________________________ _ 


Fixed _________________________________________________________________________________ _ 


Flexible _______________________________________________ -------------------------------- 


P!"ogre=-si\.~e ke~- __ :: _____________________________________________________________________ _ 


Repeating key_______________________________________ 
------------------------------- 


Suppression of, in ape::-iodic ~ipher~-------- ___________________________ ----------- _________ _ 


P"!:!i test: 


Digraphic _____________________________________________ . 
Explana:!on ___________________________________________ _ 


lionoaipnabetic suostitmion ___________ -----------1.-11-- 1-----111---1--------1 -----1---- 


~se--1----------------------------------------------- --------------------------------- 
Y ariant form . .use _______ . ________________________ -- ________ -- __________________________ __ 


Placements, categories of, ir1 Playfair ciphers _____________ _ 


Placement oi cipher equivalents in four-square system _______ _ 
Plain: 
Alphabec ___________________________________________ _ 
Alphabet relation to cipher ___________________________ . 
Ten recovery ___ : ___ ; _________________________________________________________________ _ 


Plain component: 


g~~;~e~;:~~e;~;i;di-c~~ip-;;~: ~ ~ ~:: ~: ~ ~::: ~: ~:: ~ ~ : : : : : -: : : : : : : : : : ~ ~ ~ ~ ~::: ~::: ~ ~ -~ ~ ~: ~: ~ ~ ~ : 
Plaintext: 
Recovery by anagramming ____________________________ . _________________________________ _ 


in Pl-ayf air ciphers __________________________ . _______________________ "' ______ _ 


13-lOa 


13-11 b 


13-.jb 


13-.Sa 


12-6c 
13-l3a 
13-l2d 


13-ba 


l3-l9a 
13-:3a 
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